Architect Sr IT Security

Boyd Gaming - Las Vegas, NV

Full-time - Mid Level

Las Vegas, NV

Accommodation

About the position

The Senior Information Security Architect at Boyd Gaming Corporation is responsible for leading the review and understanding of the current application landscape and technical architecture, addressing security issues, and developing future state enterprise architecture. This role involves creating documentation for principles, policies, and standards, while supporting application teams in their migration to secure architectures. The architect will also evaluate security requirements, implement security systems, and collaborate with various teams to ensure compliance with security standards and policies.

Responsibilities

• Lead the review and understanding of the current application landscape and technical architecture.
• Drive and develop future state enterprise architecture and application frameworks based on business needs.
• Document principles, policies, standards, and governance processes.
• Support application teams in identifying migration paths to future state architecture.
• Evaluate business strategies and requirements to implement security requirements.
• Conduct system security and vulnerability analyses/risk assessments.
• Implement security systems by specifying attack vectors and methodologies.
• Explain reference architecture/models to business and IT stakeholders for buy-in.
• Advise IT teams and business units on compliance with standards and policies.
• Evaluate security and applicability of applications and technology from acquired entities.
• Plan delivery of solutions and mentor less experienced team members.
• Coordinate third-party architectural risk analyses including threat modeling.
• Perform requirements analysis and design of security features and functionality.
• Collaborate with IT Products and DevOps teams on security features and functionality.
• Perform manual code reviews for authentication, authorization, and data security.
• Establish secure coding standards and educate software engineers on secure development practices.
• Evaluate and implement tactics for programmatically evaluating code for security bugs during CI/CD phases.
• Evaluate results of security assessments to prioritize remediation work.

Requirements

• Bachelor's degree in Information Technology, Information Security, Computer Science, Mathematics, or equivalent experience.
• 5-8 years of experience in IT.
• 3-5 years of experience in Information Security.
• Strong understanding of architectural considerations such as security, performance, scalability, and reliability.
• Ability to think objectively and develop innovative solutions.
• Experience with security tools such as EndPoint, SIEM, Email Security, Identity and Access Control, etc.
• Understanding of network protocols and application data flow analysis.
• Familiarity with application security practices and secure development lifecycle management.
• Ability to analyze business operations and apply security solutions accordingly.

Nice-to-haves

• Advanced degree in a relevant field.
• Experience with cloud governance frameworks.
• Familiarity with OWASP and cryptography in applications.

Benefits

• Health insurance
• 401k retirement plan
• Paid holidays
• Professional development opportunities