Cybersecurity Architect - Principal

Huntington Bank is hiring a Cybersecurity Architect - Principal in Columbus, OH to design security solutions that protect business and customer data while enabling execution and innovation.

Responsibilities

• Deliver cybersecurity architecture work tied to project delivery and security roadmaps
• Provide technical leadership across the cybersecurity organization
• Conduct research and development to enable future cybersecurity capabilities
• Serve as a final approver of information security controls on projects

Requirements

• 4+ years cybersecurity architecture
• 8+ years information security experience
• 10+ years experience delivering technology solutions in large-scale complex organizations
• Associate's Degree or 4+ additional years of equivalent experience
• Extensive knowledge of traditional security controls and technologies, including:
  • Security Information and Event Management (SIEM)
  • Intrusion detection/prevention systems (IDS/IPS)
  • Public key infrastructure (PKI)
  • Identity and access management (IDAM)
  • Antivirus and firewalls
• Experience with newer security capabilities, including:
  • Endpoint detection and response (EDR)
  • Threat intelligence platforms
  • Security automation and orchestration
  • Deception technologies
  • Application controls
• 5+ years experience in architecture, governance, risk management, including PCI DSS control governance, application security, encryption, key management, and identity and access management
• Experience with mobile and web application design, development, and management principles
• Experience influencing management on technical and business solutions
• Cloud computing experience across software-, infrastructure-, and platform-as-a-service, including public, private, and hybrid environments
• Excellent verbal, written, and interpersonal communication skills
• Knowledge of data protection technologies and practices
• Knowledge of threat analysis and assessment of current and potential information security risk/threats
• Strong understanding of application or software security, including dynamic application security testing, secure code review, and secure static code analysis
• Knowledge of cryptography and key management
• Knowledge of service-oriented architecture and associated security controls
• Knowledge of enterprise authentication and authorization technologies, including LDAP, SAML, XACML, and reverse authenticating proxies
• General understanding of diverse platforms and operating systems, including current and emerging technologies
• CISSP
• Experience architecting applications for financial services business

Technologies

• Security Information and Event Management (SIEM)
• Intrusion detection/prevention systems (IDS/IPS)
• Public key infrastructure (PKI)
• Identity and access management (IDAM)
• Antivirus
• Firewalls
• Endpoint detection and response (EDR)
• Threat intelligence platforms
• Security automation and orchestration
• Deception technologies
• Application controls
• PCI DSS
• Encryption
• Key management
• Cloud computing
• Software-as-a-service (SaaS)
• Infrastructure-as-a-service (IaaS)
• Platform-as-a-service (PaaS)
• Mobile application design
• Web application design
• Dynamic application security testing
• Secure code review
• Secure static code analysis
• Cryptography
• Service-oriented architecture
• LDAP
• SAML
• XACML
• Reverse authenticating proxies
• CISSP

Location and Work Setup

• Location: Columbus, OH (onsite)
• Workplace type: Office

• Certain positions outside the branch network may be eligible for a flexible work arrangement.
• In-office and work from home may be combined for some roles.
• Remote roles may have opportunities to meet in offices for moments that matter.
• Specific work arrangements will be provided by the hiring team.

Compensation

• Salary range: USD 93,000 - 189,000 per year
• Exempt status: Yes (not eligible for overtime pay)

Benefits

• Health insurance coverage
• Wellness program
• Life and disability insurance
• Retirement savings plan
• Paid leave programs
• Paid holidays
• Paid time off (PTO)