Partner with product engineering, DevOps, and compliance teams to develop secure architecture patterns that consider factors like data protection, access control, and segmentation.
Assess and validate security requirements based on the capabilities and risks of new and emerging information technologies, including Artificial Intelligence (AI).
Participate in threat modeling exercises to proactively identify security risks and guide secure design decisions.
Function as a subject matter expert across multiple security domains like cloud security posture management, identity and access management, and server/endpoint protection. Provide input into strategic security initiatives and roadmaps.
Stay up to date with emerging threats and trends. Assist with monitoring and evaluating the effectiveness of information security safeguards and remediating discovered gaps.
Author code/scripts to audit, monitor, and/or remediate undesirable configurations within the environment.
Perform security code reviews and be able to identify implementation details that may lead to security vulnerabilities.
Occasionally participate in the security incident response process, providing expertise in root cause analysis and remediation.
Qualifications
Bachelor’s degree or equivalent work experience in Computer Science, Cyber Security, Information Systems, or a related field.
13+ years of hands-on security experience, with at least 3 years in a dedicated security architecture role.
Experience securing micro-service and serverless architectures, with an emphasis on AWS services like ECS/ECR, Lambda, API Gateway, RDS, Secrets Manager, S3, and IAM.
Strong working knowledge of regulatory and compliance frameworks like ISO27001, NIST, HITRUST, and SOC.
Certifications in AWS (Solutions Architect, Security Specialty), Azure (AZ-104, AZ-305, AZ-500) or equivalents from another public cloud provider.
Proficient in authentication protocols like LDAP, SAML, and OAuth.
Comfortable with at least one coding language like Python, PowerShell, Java/JavaSript, or Node.
Prior experience in networking and firewalling is a plus.
- Position Level
- Senior Manager
