Senior Security Architect

Responsibilities

• Support the implementation of secure architecture patterns across AWS and Microsoft Azure environments.
• Support deployment and operationalization of CNAPP/CSPM platform.
• Drive cloud security posture improvements by integrating CNAPP with Cloud-native tools.
• Partner with Security Operations to automate and integrate with MSSP and SOAR automation response principles.
• Partner with engineering and development teams to embed application security controls into development and deployment pipelines.
• Lead and support vulnerability management and patching programs across infrastructure and applications.
• Contribute to security architecture reviews, threat modeling, and design validation.
• Support implementation and optimization of IAM, PAM, and least-privilege access models.
• Collaborate with SecOps team to integrate telemetry into SIEM platforms for monitoring and detection.
• Support in the development and maintenance of secure configuration baselines and reference architectures.
• Help drive patching strategy for servers, endpoints, and cloud workloads.
• Conduct architecture reviews and document security requirements.
• Partner directly with engineering leaders to bake security into product roadmaps.
• Stay up-to-date with the latest security trends, threats, and technologies to continuously improve security posture.
• Help drive a culture of zero trust security across engineering, development, and product teams.

Requirements

• Bachelor’s degree in a technical field or equivalent job experience.
• Minimum of 6+ years of industry experience.
• Experience in cybersecurity, cloud security, or security engineering.
• Relevant certifications (e.g. CISSP, CEH, GIAC, ISSAP).
• Hands‑on experience securing AWS and/or Azure environments.
• Working knowledge of CNAPP/CSPM platforms.
• Experience with vulnerability scanning, remediation tracking, and patch management processes.
• Familiarity with application security principles (SAST, DAST, secure SDLC).
• Experience with IAM, PAM, and access governance concepts.
• Exposure to SIEM and security monitoring integration.
• Knowledge of Zero Trust architecture principles.
• Understanding of network segmentation, VPN, Conditional Access, and cloud networking fundamentals.
• Proficiency in scripting and automation (e.g., Python, PowerShell, Terraform).
• Familiarity with container security technologies (Docker, Kubernetes) and infrastructure as code (IaC) tooling.
• Knowledge of encryption and key management practices.
• Strong communication skills and ability to work with both technical and non‑technical stakeholders.