Security Architect

Job Summary: We are seeking an experienced Cybersecurity Architect to design and implement robust security solutions to protect our organization s systems, networks, and data. The ideal candidate will have a deep understanding of cybersecurity frameworks, industry best practices, and the ability to develop strategic plans that address both current and emerging threats. As a Cybersecurity Architect, you will work closely with internal teams and external partners to ensure the protection and resilience of our IT infrastructure.

Key Responsibilities:

• Security Architecture Design Strategy:
  Design, develop, and implement security architectures for enterprise-wide systems, networks, applications, and databases to ensure data protection and compliance with security policies and regulations.
• Risk Assessment Threat Modeling:
  Conduct regular risk assessments, vulnerability analysis, and threat modeling to identify potential security weaknesses and recommend countermeasures.
• Security Standards Best Practices:
  Develop and enforce security standards, policies, and guidelines in line with industry best practices, compliance regulations (such as NIST, ISO 27001, GDPR, etc.), and business requirements.
• Incident Response Planning:
  Develop and implement incident response plans and ensure they align with business continuity and disaster recovery strategies. Lead response efforts during major security incidents.
• Security Tool Solution Selection:
  Identify, evaluate, and recommend security tools and technologies - firewalls, intrusion detection/prevention systems, endpoint protection, encryption solutions, IAM Solutions to enhance security posture.
• Collaboration with IT Development Teams:
  Work closely with IT infrastructure, development, and DevOps teams to integrate security solutions into systems and applications, ensuring secure system designs and secure software development practices (DevSecOps).
• Compliance Auditing:
  Ensure all security solutions meet regulatory compliance requirements. Prepare for and participate in security audits and assessments.
• Training Awareness:
  Provide security training and awareness programs to staff members to promote security best practices across the organization.
• Continuous Monitoring Improvement:
  Implement continuous monitoring of network and system security, analyzing security metrics and trends, and improving the security architecture based on findings and evolving threats.
• Vendor Third-Party Security Management:
  Evaluate the security posture of third-party vendors, contractors, and partners. Ensure that outsourced services meet internal security standards.

Qualifications:

• Education:
  Bachelors degree in Computer Science, Information Technology, Cybersecurity, or related field (Masters degree preferred).
• Certifications (preferred but not required):
  • Certified Information Systems Security Professional (CISSP)
  • Certified Information Security Manager (CISM)
  • Certified Ethical Hacker (CEH)
  • CompTIA Security+
• Experience:
  • 12+ years of experience in cybersecurity, with at least 2 years in an architectural role.
  • Proven experience with cloud security architectures (AWS, Azure, Google Cloud).
  • Strong knowledge of security technologies, protocols, and tools - SailPoint IAM, OKTA, Sentinel IPS, Insight VM, Metasploit, MS MDM, firewalls, encryption, VPNs, Splunk SIEM system
  • Hands-on experience with securing networks, operating systems, web applications, and databases.
  • Familiarity with security frameworks such as NIST, ISO 27001, CIS Controls, etc.
• Skills:
  • Deep understanding of cyber threats, vulnerabilities, and mitigation techniques.
  • Excellent problem-solving, analytical, and decision-making skills.
  • Strong communication and interpersonal skills, with the ability to explain complex security concepts to both technical and non-technical stakeholders.
  • Ability to work collaboratively with cross-functional teams.
• Other Requirements:
  • Knowledge of incident detection, response, and forensics practices.
  • Experience with security automation and orchestration tools.
  • Familiarity with secure software development practices and DevSecOps principles.