Senior Application Security Architect

Join to apply for the Senior Application Security Architect role at Morningstar

1 week ago Be among the first 25 applicants

Join to apply for the Senior Application Security Architect role at Morningstar

The Team :

The Information Security department is responsible for setting enterprise security policies and standards that are designed to protect the confidentiality, integrity, and availability of Morningstar information. The security team offers guidance and technical expertise in areas like application security, infrastructure and cloud security, policies and procedures, disaster recovery and compliance / regulation. We analyze emerging security threats and conduct risk and vulnerability assessments to ensure that our information remains secure.

The Team :

The Information Security department is responsible for setting enterprise security policies and standards that are designed to protect the confidentiality, integrity, and availability of Morningstar information. The security team offers guidance and technical expertise in areas like application security, infrastructure and cloud security, policies and procedures, disaster recovery and compliance / regulation. We analyze emerging security threats and conduct risk and vulnerability assessments to ensure that our information remains secure.

The Role :

The Senior Application Security Architect will be part of the central information security team and act as a subject matter expert to all of Morningstar’s product teams by provide security guidance and creating application security standards and patterns. The successful candidate will contribute to maintaining Morningstar’s security posture by performing threat modeling, security architecture reviews of Morningstar products and ensure that major projects receive appropriate architectural security guidance, requirements setting, and review. The Application Security Architect will also partner with the Director of Product Security to define the direction of the application security program as well as on improving security processes and tooling. The position will be based in our Chicago or Toronto office.

We follow a hybrid policy of 3 days onsite and 2 days remote work.

Job Responsibilities :

• Collaborate with development teams across the organization to secure products
• Contribute to secure reference architectures and patterns for all product teams to leverage
• Develop, maintain, and communicate future and current product security initiatives
• Develop and enhance internal security processes, programs, and procedures
• Conduct risk assessments, threat modeling, and product security reviews on Morningstar systems
• Work directly with internal business units to communicate risk, provide security remediation advice, and deliver education as needed.
• Document secure coding guidelines and assist execution by internal development personnel
• Identify web / mobile / api application security vulnerabilities and offer remediation advice

Qualifications :

Nice to have :

Compensation And Benefits

At Morningstar we believe people are at their best when they are at their healthiest. That’s why we champion your wellness through a wide-range of programs that support all stages of your personal and professional life. Here are some examples of the offerings we provide :

Total Cash Compensation Range

$110,775.00 - 188,325.00 USD Annual

Inclusive of annual base salary and target incentive

Morningstar’s hybrid work environment gives you the opportunity to work remotely and collaborate in-person each week. While some positions are available as fully remote, we’ve found that we’re at our best when we’re purposely together on a regular basis, typically three days each week. A range of other benefits are also available to enhance flexibility as needs change. No matter where you are, you’ll have tools and resources to engage meaningfully with your global colleagues.

100_MstarResCanad Morningstar Research, Inc. (Canada) Legal EntitySeniority level

Employment type

Job function

Referrals increase your chances of interviewing at Morningstar by 2x

Sign in to set job alerts for “Senior Application Security Architect” roles.

We’re unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI.

#J-18808-Ljbffr