Job responsibilities
- Engages technical teams and business stakeholders to discuss and propose technical approaches to meet current and future cybersecurity needs
- Defines the technical target state of their cybersecurity product and drives achievement of the strategy
- Identifies opportunities to eliminate or automate remediation of recurring issues to improve overall cybersecurity of software applications and systems
- Leads evaluation sessions with external vendors, startups, and internal teams to drive continuous improvement and assess cybersecurity design and technical credentials for use in existing systems and architecture
- Adds to team culture of diversity, equity, inclusion, and respect
- Participate in security design and architecture reviews of projects, ensuring compliance with the latest security practices.
- Develop and implement comprehensive security architectures for new and existing products
- Lead security assessments and threat modeling to identify vulnerabilities and recommend mitigation strategies.
- Identify gaps in product architecture as defined by Senior Security Architects and create detailed documentation of threats and mitigations for small software applications, ensuring comprehensive coverage of security threats.
- Work closely with stakeholders to communicate security risks and solutions effectively.
Required qualifications, capabilities, and skills
- Formal training or certification on cybersecurity architecture concepts and 5+ years applied experience
- Proficiency in automation and continuous delivery methods
- Proficiency in all aspects of the Software Development Life Cycle
- Advanced understanding of agile methodologies such as continuous integration and delivery, application resiliency, and security
- Demonstrated proficiency in software applications and technical processes within a technical discipline (e.g., public cloud, artificial intelligence, machine learning, mobile, etc.)
- A solid understanding of product security fundamentals, with expertise in performing threat modeling and a working knowledge of exploit writing.
- A deep understanding of cloud security architecture (AWS), security protocols, cryptography, authentication, authorization, vulnerabilities, and remediation techniques.
- Hands-on practical experience in delivering system design, application development, testing, operational stability and enterprise level cybersecurity controls.
- Demonstrated knowledge of application security, network security, IT risk management, and architectural concepts and patterns.
- Familiarity with modern front-end technologies (React, Javascript etc.).
- Excellent communication skills, with the ability to articulate security risks to executive audiences while also engaging in solution development with engineers.
Preferred qualifications, capabilities, and skills
- Experience in incident response.
- SANS certification, CISSP, and/or AWS certifications.
- Proficiency in coding in one or more programming languages.
- Strong knowledge of security frameworks, standards, and best practices (e.g., OWASP, NIST, ISO 27001).
- Excellent problem-solving skills and the ability to think critically and strategically.