IT Services- Architecture Consultant- Senior Associate (US Remote)

PwC is driving major change across information & cyber security by building a centralized model to provide security services across the entire member firm network.

Mandated at the network level Network Information Security (NIS) operates outside IT & is responsible for this major program initiative from definition of the security strategy to execution of the global Cyber Readiness Program moving from local to centralized services.

Our mission is to identify control & reduce the attack surface across the member firm network while increasing our adversaries cost of attack.

In order to deliver the Cyber Readiness Program the NIS team is structured into the following Pillars:

• Information Security Risk & Compliance

• CISO

• Security Architecture Engineering Innovation & Transformation (SAEIT)

• Cyber

• Strategy & Alliances

• Chief of Staff

NIS is building the first global cyber security function at PwC. Our mission protects 300000 PwC members across 160 member firms worldwide as well as our global clients.

If you are seeking an exciting career with the scope to grow your security skills through major change on a global scale then NIS will empower you to do so.

NIS is responsible for the following services:

• Security Architecture

• Security Engineering

• Innovation

• Security Transformation

• Application Security

If you love designing & building security technology this is the place to be. Within NIS we work closely with the business to define the NIS 5 year security roadmap. Gathering business requirements to combine PwCs goals with conceptual long term security trends to create a target architecture for NIS to deliver against. From this future state plan the Security Engineering team breaks down long term goals into manageable projects and looks to technical security solutions to solve business problems. Designing & building security technology that span the wider PwC network of firms. Once security technologies are built the NIS team works to assist technology teams in designing and deploying compliant applications.

Range of Impact:

• Employee possesses deep functional knowledge in a specific subject matter area or technical domain that is applied in the context of a broader understanding of the functional area and related systems and processes.

• The candidate will contribute to the development of new subject matter/technical domain expertise.

• Resolves complex problems by continuously applying significant independent judgment and by collaborating with others and influences others through work on projects and in teams and/or through leading portions of larger projects

• Demonstrates extensivelevel abilities within Application Security.

• Encourages improvement and innovation within Application Security and nurturing and developing lessexperienced staff through coaching and written/verbal feedback.

• Perform Application Security tasks with autonomy.

Degree Required:

High School Diploma

Bachelor Degree

Fields of Study:

Information Technology Computer Systems Analysis Management Information Systems Computer Applications Computer Engineering Computer Programming are a major plus

Certification(s):

CISSP CCSP CISM CISA are a major plus

Experience/Skills:

• 13 years experience in a software development field such as Software Developer Architect Software Quality Assurance or Application Security Engineering

• 13 years experience in Cloud Infrastructure such as Cloud Engineer Infrastructure Architect or SRE Engineer

• Possess a strong understanding of application architectural patterns such as MVC Microservices Eventdriven etc.

• Creative organized responsive and thorough problem solver

• Possess strong business acumen with ability to work with application development QA and security teams

• Knowledge of the OWASP Top 10

• Strong selfstarter who can operate independently

• Excellent oral/written presentation skills with ability to communicate effectively with senior executive leadership; proficiency in preparation of presentations analytical reports and documents regarding program operational status achievement and performance

• Possessing knowledge and experience with application security solutions and web hosting architecture and principles

• Leveraging experience with Software development including web mobile applications and development languages

• Having experience with commercial Source Code Analysis/Static Application Security Testing Tools

• Understanding of application source code vulnerability mitigation processes

• Recognizing risk assessment/acceptance factors that can affect business and security decisions

• Having knowledge of and experience with Business processes and drivers that can affect system design

• Analyzing application security vulnerabilities and executing mitigation strategies.

• Leveraging review processes using application threat vulnerability tools scanning techniques and/or code review results

• Using assessments of vulnerabilities sources of threats and current security guidance to determine the effectiveness of mitigation plans

• Knowledge of effective controls for Application Security Cloud & Services Hosting Identity and Access Management Data Protection Borderless Connectivity Endpoint Security and Cyber Security Operations

• Conversant with ISO 27002:2005/2013 information security standard

• Demonstrating architectural domain knowledge including cloud application architecture and containerbased deployment

• Partnering with and enabling the development process to assure that security requirements are met while allowing for maximum speed to market

• Experience collaborating with multiple stakeholders across functional and technical skill sets

• Aligning business requirements to complex security architecture frameworks

A Plus:

• Understanding and Passion for Agile/XP/Scrum/Kanban

• Understanding of TestDriven Development built on User Stories

• Understanding of Continuous Integration/Testing/Delivery/CI/CD

• Familiarity with cloud architecture and services such as Azure AWS GCP.

• Familiarity with Metasploit Burp Suite Fuzzing and Jenkins.

• Familiarity with code reviews and penetration testing.

This is a U.S. based role and PwC IT Services (US) LLC does not intend to hire external job seekers who will need now or in the future PwC IT Services (US) LLC sponsorship through the H1B lottery.