Sr Info Security Architect - Cyber Defense Professionals

Job Expired

Job Details

Description

What will my role look like?

As a Senior Information Security Architect, you will work closely with IT and business senior leaders to drive a security-minded culture, while defining standards and maintaining security controls at the Enterprise level. Within our growing organization, you will have the critical responsibility to identify, document and communicate complex security and technical issues, in a simplified, non-technical way to a broad audience, from junior developers to senior executives. You are a curious, self-starter joining an organization that is technologically and digitally transforming. You are willing to challenge the status quo with the mindset of continuous improvement and a drive for seamless execution. You will be a security champion within Information Security that influences and inspires people from a range of disciplines, as well as colleagues and internal clients at every level.

Define and Design

Work across the business to define technical and functional requirements covering areas of software design, including microservice APIs, Cloud Services (Azure, AWS, etc.), and XaaS integration
Work with software/infrastructure architects and leads to ensure security components (security technology, operations, and management) are integrated into the design as defined in the requirements
Design and develop cost effective, pragmatic, security solutions that meet functional, technical, and performance requirements.

Evaluate

Review security architecture deliverables throughout software/system development and implementation to ensure quality and requirement traceability
Ensure adherence to all regulatory and security industry best practices (NYDFS, FINRA, OWASP, SANS, NIST, CIS)
Assess the software/systems security architecture, ensuring that it meets business and security requirements, as well as industry regulations.
Security Architecture from hardware, network and software
Assess risk and Identify gaps in complex end-to-end solutions involving a mix of traditional on-premise technologies and cloud native services.
Take ambiguous requirements and identify, suggest, and implement effective compensating controls in a complex, fast-moving, and regulated cutting-edge environment

Collaborate and Communicate

Identify and communicate any cross area or cross release security issues that affect other project areas
Partner with other architects and technology leads to define a governance process to ensure continued compliance with stated security design requirements
Document and communicate the status of progress against plans, taking corrective action as necessary

Qualifications: Does this sound like you?

Education & Experience

At least 3 years’ working in a senior level role on an Information Security team AND 10 years’ experience in IT or Information Security
Experience translating security industry best-practices, including nonrepudiation, auditing, and monitoring into actionable, real-world guidance
Certified Information Systems Security Professional (CISSP) required or able to attain within 6 months of hire
Demonstrated understanding of Azure technologies

Preferred Skills

Familiarity with agile development and modern development environments (CI/CD pipelines, Static and Dynamic code analysis tools, etc.)

Experience working with a large complex Azure environment with numerous cloud-native services.
Knowledge of programming/scripting languages such as Java, .Net, Powershell, or Python.
Knowledge of Containerization technologies such as; Kubernetes, Openshift, Docker

Preferred Credentials

Any additional security certifications, such as:
- Offensive Security Certified Professional (OSCP)
- Certificate of Cloud Security Knowledge (CCSK)
- Information Systems Security Architecture Professional (ISSAP)
- GIAC certifications

How You Show Up

You’re a coach who knows how to guide others. You’re a good listener and an effective communicator who can execute, lead by example and add business value.

You want to part of a culture and a team where you have a voice, and you respect the voices of others.

While we will consider remote work, our preference is for candidates who are able to work on site, at least part-time, in either our Dallas, Texas or Montpelier, VT office.