Shape enterprise-grade cybersecurity solutions while working on high-impact collaboration and communication platforms. This onsite role in Jersey City, NJ supports secure software application and platform products across cloud, SaaS, Microsoft 365 services, integrations, and AI-enabled capabilities. You will guide solution quality using recognized standards and frameworks, with opportunities to influence peers and senior decision-makers.
Responsibilities
- Evaluate current cybersecurity principals, processes, and controls, and lead evaluation of new technology using established standards and frameworks, influencing adoption of leading-edge solutions.
- Use enterprise-authorized AI capabilities to accelerate cybersecurity risk analysis and control assessment, including validation of outputs and handling data according to sensitivity and security requirements.
- Provide technical guidance and direction as a function-wide subject matter expert in one or more focus areas for business and technical teams, contractors, and vendors.
- Recommend business modifications during periods of vulnerability with stakeholders and senior business leaders.
- Advocate and contribute to the engineering community by supporting firm-wide frameworks, tools, and Software Development Life Cycle (SDLC) practices.
- Drive reuse-first adoption of AI-assisted security validation within SDLC and toolchain routines to improve control testing, remediation quality, and traceability or auditability in line with resiliency expectations.
- Lead cybersecurity architecture and design reviews for cloud platforms, SaaS solutions, Microsoft 365, AI-enabled services, and strategic technology integrations.
- Conduct threat modeling, attack-surface analysis, and security architecture reviews to identify threats, attack paths, control gaps, and cybersecurity risks.
- Evaluate third-party integration risks across APIs, application permissions, authentication patterns, data flows, external connectivity, and trust boundaries.
- Assess existing security controls and define practical mitigation strategies or compensating controls when threats are not sufficiently mitigated.
- Partner with engineering and product teams to translate findings into actionable remediation plans and drive issues toward resolution.
Requirements
- 5+ years of applied experience with formal training or certification on cybersecurity architecture.
- Hands-on experience delivering enterprise-level cybersecurity solutions and controls.
- Demonstrated ability to use enterprise-authorized AI capabilities within the work environment for cybersecurity architecture workflows, with strong validation habits and awareness of data sensitivity.
- Ability to assess and validate AI-assisted security recommendations before adoption, escalating uncertainty and ensuring outcomes align to security, resiliency, and auditability expectations.
- Advanced expertise in one or more programming languages and/or applications, plus advanced knowledge of cybersecurity architecture, applications, and technical processes in one or more disciplines (for example public cloud, AI/ML, mobile).
- Capability to tackle design and functionality problems independently with little to no oversight.
- Ability to evaluate current and emerging technologies to recommend solutions for future-state architecture.
- Hands-on experience with threat modeling, attack-surface analysis, and security architecture assessments.
- Proven ability to identify threats, control gaps, cybersecurity risks, and appropriate mitigation strategies.
- Strong understanding of modern cloud security, including identity and access management, authentication and authorization, application and API security, data protection, logging and monitoring, and trust boundaries.
- Ability to interpret architecture diagrams and data flows, evaluate security controls, and communicate technical risks and recommendations to engineering, product, risk, and leadership stakeholders.
Technologies
Microsoft 365, Microsoft Entra ID, Microsoft Graph, Microsoft Purview, Microsoft Defender, Microsoft Copilot, Exchange Online, Microsoft Teams, SharePoint Online, OneDrive, AI/ML, LLM-enabled applications, NIST, MITRE ATT&CK, STRIDE, OWASP, zero-trust principles, AWS, GCP, Microsoft Azure, OAuth, SDLC.
Benefits
- Comprehensive health care coverage
- On-site health and wellness centers
- A retirement savings plan
- Backup childcare
- Tuition reimbursement
- Mental health support
- Financial coaching
Preferred Qualifications, Capabilities, and Skills
- Experience securing enterprise cloud and SaaS environments, including assessing architecture, data flows, identity, access, integrations, and security controls across third-party services.
- Security architecture experience across AWS, GCP, and Microsoft Azure, including cloud-native security controls and shared responsibility models.
- Experience evaluating SaaS integrations, APIs, OAuth applications, service principals, application identities, and machine-to-machine authentication from a security and risk perspective.
- Experience with Microsoft 365 security architecture including Exchange Online, Microsoft Teams, SharePoint Online, OneDrive, Microsoft Entra ID, Microsoft Graph, Microsoft Purview, Microsoft Defender, and Microsoft Copilot.
- Experience securing AI/ML and LLM-enabled applications, agents, and emerging AI capabilities, including risks tied to data access, permissions, external integrations, and third-party model dependencies.
- Experience developing security control baselines, architecture standards, threat models, assessment frameworks, and reusable security patterns across cloud and SaaS technologies.
- Familiarity with NIST, MITRE ATT&CK, STRIDE, OWASP, and zero-trust principles.
About the Team
Corporate Functions teams span areas such as finance and risk to human resources and marketing. Corporate teams are a core part of the organization, helping ensure businesses, clients, customers, and employees are set up for success.
Compensation: USD 175,750 - 260,000 per yearly.
