Cybersecurity Architect
Application Security
Cloud Platforms
Cybersecurity Architecture
Cybersecurity Tools
Data Security
Identity and Access Management
Information Security
Information Technology (IT)
InfoSec
Risk Management
Security
Security Architecture
Security Compliance
Security Standards
Security Testing
Software Security
Solution Architecture
Job Description
Drive enterprise security architecture and Zero Trust adoption to strengthen cybersecurity posture across IT systems and platforms.
Responsibilities
- Partner with engineering, operations, and security specialists to ensure security controls are implemented across all IT systems and platforms to mitigate identified risks and meet business, regulatory requirements
- Evaluate current security posture and future architecture requirements; provide recommendations to improve security and reduce risk
- Ensure implemented solutions align with cybersecurity architecture objectives (availability, scalability, performance, security); monitor implementation activities to uphold architecture and design principles
- Support implementation of enterprise information security architecture artifacts (frameworks, standards, repeatable patterns) and work with infrastructure teams to drive adoption
- Act as a security expert for application development, database design, and network and/or platform (operating system) initiatives to support compliance with enterprise policies, industry regulations, and best practices
- Develop security configuration guidelines for IT devices and systems and define mechanisms to assess compliance against those guidelines
- Design and support a comprehensive Zero Trust Architecture framework to protect confidentiality, integrity, and availability of systems and data
- Create security policies, access controls, and authentication mechanisms based on Zero Trust principles
- Assess existing network and security infrastructure, identify vulnerabilities, and recommend enhancements aligned with Zero Trust principles
- Apply knowledge of OWASP and SANS Top 20 prevention and remediation techniques
- Collaborate in a group development environment as an application security engineer across software engineering, QA, and build/test/release teams
- Deploy, maintain, support, and analyze DAST/SAST scan results
- Coordinate short- and long-term technical objectives and manage tactical execution with accountability for results, including costs, methods, and staffing
Requirements
- Bachelor’s degree in management information systems, Computer Science, or a business/science related field
- 6-10 years experience related to internal/external audits or risk management methods and techniques for assessing and managing risk
- Familiarity with the management, operational, and technical aspects of IT Security in a complex enterprise environment
- Additional experience in cyber risk management and assessments is considered
- Strong understanding of network architecture, protocols, and security technologies
- Familiarity with cloud computing platforms: AWS, Azure, or Google Cloud, and associated security services
- Proficiency with security frameworks and standards including ISO 27001, NIST, and CIS
- Proactive, result-driven problem solving with strong analytical and interpersonal skills
- Ability to interpret IT processes, management objectives, risk appetite and tolerances, and how changes affect risk profiles
- CISA, CISSP, CRISC, or other relevant certification(s) desired
- Client services orientation and communication skills with urgency to keep partners informed, including solutions to overcome obstacles
- Experience in IT governance, risk, and controls including governance frameworks
- Demonstrated technical writing, communication, and presentation skills
- Ability to work effectively in a team environment
- Creativity in addressing technical challenges
- Proven record to deliver results
Technologies
- AWS
- Azure
- Google Cloud
- ISO 27001
- NIST
- CIS
- CISA
- CISSP
- CRISC
- OWASP
- SANS Top 20
- DAST
- SAST
Benefits
- Medical, dental, and vision insurance
- 401(k) with company match
- Paid time off
- Parental leave
- Potential for performance-based bonuses depending on company and individual performance
Work Location and Conditions
- Location: Waltham, MA (remote)
- Travel: Approximate 10% to corporate office as required
- Reasonable accommodations may be made for individuals with disabilities
Compensation
- Annual rate: $137,000.00 - $229,000.00
- Employment: yearly