cyber security architect

Systems Limited

<div>
 <p>
  The Security Architect is a senior expert within the Enterprise Architecture function, responsible for defining and governing the organization&rsquo;s cybersecurity architecture. This role ensures that enterprise systems, platforms, and data are protected through robust security designs, aligned with regulatory requirements and industry best practices.
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Responsibilities
  </strong>
 </p>
 <ul>
  <li>
   Define and maintain the
   <strong>
    enterprise security architecture strategy
   </strong>
   , including security principles, standards, and reference architectures.
  </li>
  <li>
   Design and implement
   <strong>
    secure architecture patterns
   </strong>
   across cloud, on-premises, and hybrid environments.
  </li>
  <li>
   Establish
   <strong>
    security-by-design principles
   </strong>
   and ensure their adoption across all technology initiatives.
  </li>
  <li>
   Lead the development of
   <strong>
    identity and access management (IAM), network security, data protection, and endpoint security architectures
   </strong>
   .
  </li>
  <li>
   Conduct
   <strong>
    security architecture reviews and risk assessments
   </strong>
   for new and existing systems.
  </li>
  <li>
   Ensure compliance with
   <strong>
    banking regulations, data protection laws, and industry standards
   </strong>
   (e.g., ISO 27001, NIST, PCI DSS).
  </li>
  <li>
   Collaborate with infrastructure, application, and DevOps teams to embed
   <strong>
    security controls into CI/CD pipelines (DevSecOps)
   </strong>
   .
  </li>
  <li>
   Define and enforce
   <strong>
    security governance, policies, and architecture guardrails
   </strong>
   .
  </li>
  <li>
   Lead the evaluation and implementation of
   <strong>
    security tools and platforms
   </strong>
   (e.g., SIEM, firewalls, EDR, DLP).
  </li>
  <li>
   Oversee
   <strong>
    threat modeling, vulnerability management, and incident response architecture
   </strong>
   .
  </li>
  <li>
   Ensure proper design of
   <strong>
    encryption, key management, and data security controls
   </strong>
   .
  </li>
  <li>
   Stay current with
   <strong>
    emerging cyber threats, vulnerabilities, and security technologies
   </strong>
   .
  </li>
  <li>
   Provide
   <strong>
    technical leadership and mentorship
   </strong>
   to security engineers and teams.
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Requirements
  </strong>
 </p>
 <ul>
  <li>
   Bachelor&rsquo;s degree in Computer Science, Cybersecurity, or related field.
  </li>
  <li>
   15+ years in IT, with at least 5&ndash;7 years in
   <strong>
    security architecture or cybersecurity leadership roles
   </strong>
   .
  </li>
  <li>
   Strong expertise in:
  </li>
  <li>
   Network security (Palo Alto, Checkpoint, Cisco security)
  </li>
  <li>
   Identity &amp; access management (IAM, PAM, SSO, MFA)
  </li>
  <li>
   Cloud security (AWS, Azure, OCI security frameworks)
  </li>
  <li>
   Data protection, encryption, and key management
  </li>
  <li>
   Deep understanding of
   <strong>
    security frameworks and standards
   </strong>
   (NIST, ISO 27001, CIS, Zero Trust).
  </li>
  <li>
   Experience with
   <strong>
    security in DevOps environments (DevSecOps)
   </strong>
   .
  </li>
  <li>
   Hands-on knowledge of
   <strong>
    security tools
   </strong>
   such as SIEM, SOAR, EDR/XDR, DLP.
  </li>
  <li>
   Strong understanding of
   <strong>
    regulatory compliance in banking/financial services
   </strong>
   .
  </li>
  <li>
   Experience in
   <strong>
    risk management, threat modeling, and vulnerability assessment
   </strong>
   .
  </li>
  <li>
   Certifications such as
   <strong>
    CISSP, CISM, CCSP, CEH
   </strong>
   are highly preferred.
  </li>
  <li>
   Excellent problem-solving, communication, and stakeholder engagement skills.
  </li>
  <li>
   Familiarity with
   <strong>
    enterprise architecture frameworks (TOGAF)
   </strong>
   and ITIL practices.
  </li>
 </ul>
 <p>
 </p>
</div>


Enterprise Cyber Security Architect

Regions Financial

Thank you for your interest in a career at Regions. At Regions, we believe associates deserve more than just a job. We believe in offering performance-driven individuals a place where they can build a career --- a place to expect more opportunities. If you are focused on results, dedicated to quality, strength and integrity, and possess the drive to succeed, then we are your employer of choice.
<br><br>
Regions is dedicated to taking appropriate steps to safeguard and protect private and personally identifiable information you submit. The information that you submit will be collected and reviewed by associates, consultants, and vendors of Regions in order to evaluate your qualifications and experience for job opportunities and will not be used for marketing purposes, sold, or shared outside of Regions unless required by law. Such information will be stored in accordance with regulatory requirements and in conjunction with Regions’ Retention Schedule for a minimum of three years. You may review, modify, or update your information by visiting and logging into the careers section of the system.
<br><br>
<b>Job Description:</b><br>
At Regions, the Cyber Security Architect contributes to the advancement of Regions’ cyber security program and its capabilities through developing, communicating, and implementing a security architecture. This position establishes secure development practices which increases the security of internal systems. Additionally, this position collaborates closely with key stakeholders and teams as part of business projects and/or initiatives. The architect at this level is considered to have advanced technical skills and knowledge and manages significant, complex projects related to Regions’ cyber security programs.
<br><br>
Primary Responsibilities
<br>Develops and establishes a strategic cyber security architecture and strategic vision, including standards and frameworks that are aligned with the overall business and Regions’ information technology strategy
<br>Serves as cyber security subject-matter expert and provides advisory and consultative services to businesses, information technology groups, and cyber security senior leadership
<br>Works closely with Enterprise Architecture and Application Development groups to enhance the security posture of new and existing systems
<br>Designs cyber security architecture, evaluates and mitigates potential risk, and approves implementation of systems and applications into production
<br>Collaborates with senior cyber security leadership to ensure team is complying with all applicable regulations, policies, and guidelines, both internally and externally, monitoring and evaluating trends in the industry to maintain compliance
<br>Collaborates with application and system owners to establish compliance standards and trackable metrics
<br>Provides consultative services related to significant, complex business projects
<br>Leads the work of junior architects and evaluates needs, assisting in the development of necessary skills and technical knowledge
<br><br>
This position is exempt from timekeeping requirements under the Fair Labor Standards Act and is not eligible for overtime pay.
<br><br>
This position is incentive eligible.
<br><br>
Requirements
<br>Bachelor’s degree in Computer Science, or related field
<br>Ten (10) years of experience in cyber security, with a focus on software development, secure software development lifecycle (SDLC), or security architecture
<br><br>
Preferences
<br>Experience in the design and implementation of cyber security solutions
<br><br>
Skills and Competencies
<br>Ability to effectively evaluate risk vs. reward
<br>Ability to independently problem solve with sound judgement
<br>Ability to translate complex technical information across all levels of the organization through communications and/or presentations
<br>Ability to work in a team environment when applicable
<br>Expert-level knowledge of risks associated with virtualization and cloud-based computing and the impact of those technologies on an organizations security posture
<br>Expert-level knowledge of security principles, solutions, tools, methodologies, and techniques
<br>Proficiency in Microsoft Office (Excel, Word, PowerPoint, Outlook, etc.)
<br>Strong project management skills
<br>Strong verbal, written communication, and organizational skills
<br>Strong work ethic and self-motivation
<br><br>
The Security Architect, Business Enablement role is a domain‑experienced security architect who partners closely with business and technology teams to help them achieve their objectives securely and efficiently. This role is best suited for individuals who enjoy working directly with stakeholders across customer‑facing platforms and corporate functions, and who bring practical business context into technology and security discussions. The ideal candidate understands how different parts of a financial services organization operate, engages early to understand business goals and constraints, and designs security architectures that manage risk without introducing unnecessary friction—enabling progress rather than slowing it down.
<br><br>
<b>Preferred Qualifications:</b><br>
Experience bringing domain context into technology and security discussions, not just control expertise
<br>Experience as a trusted security partner to business and technology leaders, shaping solutions rather than simply reviewing them
<br>Practical understanding of how financial products, customer journeys, and corporate control functions operate in real‑world environments
<br>Knowledge of how revenue models, operational workflows, and regulatory expectations influence technology decisions
<br>Experience balancing risk, customer experience, regulatory intent, and delivery timelines in architectural decisions
<br>This position is intended to be onsite, now or in the near future . Associates will have regular work hours, including full days in the office three or more days a week. The manager will set the work schedule for this position, including in-office expectations. Regions will not provide relocation assistance for this position, and relocation would be at your expense. The locations available for this role are Birmingham, AL, Atlanta, GA, Nashville, TN, or Charlotte, NC. Regions will not sponsor applicants for work visas for this position at this time. Applicants for this position must currently be authorized to work in the United States on a full-time basis.
<br><br>
Position Type Full time
<br><br>
Compensation Details
<br>Pay ranges are job specific and are provided as a point-of-market reference for compensation decisions. Other factors which directly impact pay for individual associates include: experience, skills, knowledge, contribution, job location and, most importantly, performance in the job role. As these factors vary by individuals, pay will also vary among individual associates within the same job.
<br><br>
The target information listed below is based on the Metropolitan Statistical Area Market Range for where the position is located and level of the position.
<br><br>
<b>Job Range Target:</b><br>
<b>Minimum:</b> $170,628.15 USD
<br><b>Median:</b> $218,980.00 USD
<br><br>
<b>Incentive Pay Plans:</b> This role is eligible to participate in the annual discretionary incentive plan. Employees are eligible to receive a discretionary award based on individual, business, and/or company performance.Opportunity to participate in the Long Term Incentive Plan.
<br><br>
Benefits Information
<br>Regions offers a benefits package that is flexible, comprehensive and recognizes that "one size does not fit all" for benefits-eligible associates. Listed below is a synopsis of the benefits offered by Regions for informational purposes, which is not intended to be a complete summary of plan terms and conditions.
<br><br>
Paid Vacation/Sick Time
<br><br>
401K with Company Match
<br><br>
Medical, Dental and Vision Benefits
<br><br>
Disability Benefits
<br><br>
Health Savings Account
<br><br>
Flexible Spending Account
<br><br>
Life Insurance
<br><br>
Parental Leave
<br><br>
Employee Assistance Program
<br><br>
Associate Volunteer Program
<br><br>
Please note, benefits and plans may be changed, amended, or terminated with respect to all or any class of associate at any time. To learn more about Regions’ benefits, please click or copy the link below to your browser.
<br><br>
https://www.regions.com/about-regions/welcome-portal/benefits
<br><br>
Location Details Riverchase Operations Center
<br><b>Location:</b> Hoover, Alabama
<br><br>
Equal Opportunity Employer/including Disabled/Veterans
<br><br>
Job applications at Regions are accepted electronically through our career site for a minimum of five business days from the date of posting. Job postings for higher-volume positions may remain active for longer than the minimum period due to business need and may be closed at any time thereafter at the discretion of the company.

Security Architect, Business Enablement

COZMALABS

<p>We are seeking a highly skilled and motivated Cyber Security Architect with strong system, on prem and Cloud Security expertise to oversee and enhance the organization&rsquo;s internal security architecture, controls, and policies while actively contributing to external security initiatives and projects.</p><p>This role combines strategic architecture leadership, hands-on implementation, security research, operations oversight, and cloud security engineering, with a strong focus on Microsoft environments such as Microsoft 365, Microsoft azure , and OS security.</p><p>The ideal candidate will possess deep expertise in enterprise security architecture, domain security, on-prem and hybrid infrastructure protection, cloud-native security controls, and DevSecOps integration.</p><p>Experience Requirements</p><ul><li>Minimum 7+ years in system and Cloud Security role.</li><li>Proven experience in enterprise security architecture (on-prem + cloud)</li><li>Experience in security research, security operations, and security assurance</li><li>Experience in setting and documenting security processes and procedures in compliance with Qatar NCSA guidelines and security best practices.</li><li>Experience in operating system and infrastructure hardening.</li></ul><p>Key Responsibilities</p><ul><li>Design, implement, and maintain enterprise-wide security architecture for the company internal security, user devices, cloud, and hybrid environments.</li><li>Develop and enforce security policies, standards, and procedures.</li><li>Lead security risk assessments and define mitigation strategies.</li><li>Align security controls with business objectives and regulatory requirements.</li><li>Oversee internal security governance and compliance frameworks (ISO 27001, NIST, CIS).</li><li>Architect and secure Azure cloud environments (IaaS, PaaS, SaaS).</li><li>Implement cloud-native and third-party security controls.</li><li>Conduct detailed security assessments of cloud services to ensure compliance with internal policies and industry frameworks.</li><li>Identify and remediate misconfigurations using automated scanning and manual inspection.</li><li>Implement secure cloud architecture patterns and service integrations.</li><li>Contribute to threat modeling and cloud risk assessments.</li><li>Ensure secure hybrid integration between on-prem and Azure environments.</li><li>Secure Active Directory and domain environments.</li><li>Implement GPO hardening and identity security controls.</li><li>Manage IAM, RBAC, MFA, and privileged access strategies.</li><li>Harden Windows/Linux servers and enterprise endpoints.</li><li>Oversee firewall configurations, IDS/IPS, VPN security, and segmentation.</li><li>Implement encryption and data protection strategies.</li><li>Perform vulnerability assessments and coordinate penetration testing.</li><li>Develop scripts and automation tools (PowerShell, Python, Bash) to enhance monitoring and compliance validation.</li><li>Integrate security controls within CI/CD pipelines (DevSecOps practices).</li><li>Monitor emerging threats, tools, and vulnerabilities.</li><li>Evaluate security technologies and recommend improvements.</li><li>Contribute to threat modeling exercises.</li><li>Participate in external security architecture and implementation projects.</li><li>Provide technical advisory for client-facing security initiatives.</li><li>Review third-party security integrations and solutions.</li><li>Support pre-sales security design when required.</li><li>Conduct risk assessments and compliance audits.</li><li>Ensure adherence to CIS Benchmarks, NIST, ISO 27001.</li><li>Develop remediation guidance and contribute to policy development.</li><li>Participate in external security architecture and implementation projects.</li><li>Provide technical advisory for client-facing security initiatives.</li><li>Review third-party security integrations and solutions.</li><li>Support pre-sales security design when required.</li></ul><p>Required Technical Expertise</p><ul><li>Deep technical understanding and hands on of:</li></ul><p>Cloud &amp; Security Platforms</p><ul><li>Cloud security.</li><li>Data protection strategies</li><li>Zero Trust Architecture</li></ul><p>Infrastructure &amp; Systems Security</p><ul><li>Active Directory and Microsoft 365 hardening</li><li>User devices security</li><li>Domain security best practices</li><li>Endpoint security solutions</li><li>Hybrid identity solutions</li></ul><p>DevSecOps &amp; Automation</p><ul><li>CI/CD security integration</li><li>Secure coding awareness</li><li>Security automation scripting</li></ul><p>Certifications (Required / Strongly Preferred)</p><ul><li>CISSP &ndash; Certified Information Systems Security Professional</li><li>CCSP &ndash; Certified Cloud Security Professional</li><li>CISM &ndash; Certified Information Security Manager</li><li>Microsoft Azure Security Engineer Associate (AZ-500)</li><li>CompTIA Security+ (Foundational)</li></ul><p>Education</p><p>Bachelor&rsquo;s degree in Cyber Security, Computer Science, Information Systems, or related field (Master&rsquo;s preferred).</p><p>Work Location: In person</p>

Cybersecurity

Virtu Thinko

<p>Advanced Cyber Sec Arch\Engr &ndash; ICS\OT</p><p><b>Overview</b></p><p>This position is responsible for providing onsite and offsite cyber security services associated with industrial Process Control Networks for Company customers in the Oil and Gas; Hydrocarbon Processing; Power Generation; Pulp, Paper &amp; Printing; Continuous Web Solutions; Petrochemicals; Life Sciences; and Metals, Minerals and Mining markets. Services provided include on-site and offsite consulting, troubleshooting, network designs, implementation, assessments, and other related tasks as identified. Responsibilities of the Position</p><p><b>Act as primary customer interface to ensure proposed solutions meet their business needs.</b>Maintain technical competency with the Company Process Solutions security and networking product/systems portfolio, while maintaining expert knowledge on specific designatedsecurity/network disciplines.<b>Develop sound and trusted relationships with internal and external customers by providing accurate and efficient technical/engineering support.</b>Respond to customer inquiries, questions, and issues by diagnosing problems and providing the most appropriate technical solution in an accurate and timely manner.<b>Maintain knowledge of current industry security standards such as NIST, NCA, IEC-62443, ISO27001, etc.</b>Maintain cyber security certifications.<b>Requires 30&ndash; 65% travel</b></p><p><b>Qualifications &amp; Experience:</b></p><p>Bachelor&rsquo;s degree in a computer related field such as Computer Science, Computer informationsystems degree with a minimum of 7 years&rsquo; experience in industrial automation network systems.</p><p><b>Must have:</b></p><p>Networking certs (CCNA).</p><p>Cyber Security Risk Analysis.</p><p>5+ years Industrial Networking.</p><p>Linux/Windows Security Basics.</p><p>5+ years Leading Security Projects.</p><p>Strong Virtualization Experience (VCP).</p><p>5+ years Performing Audits/Assessments.</p><p>Familiarity with Industrial Site&rsquo;s Safety Requirements.</p><p>5+ years&rsquo; Experience within Industrial Process Control.</p><p>Microsoft &ndash; Active Directory, DNS, WSUS, Terminal Server.</p><p>Experience in LAN/WAN architectures &amp; Purdue ICS model.</p><p>Process Control System Design/Implementation Knowledge.</p><p>Experience designing and optimizing complex LAN environments.</p><p>Global Industrial Cyber Security Professional (GICSP) certification.</p><p>Cisco Certified Network/Design/Security Professional (at least one).</p><p>Experience different firewall vendors (Cisco, Juniper, Palo alto, Fortinet).</p><p>Experience performing cybersecurity/network/system services at customer sites.</p><p>Experience with anti-virus systems, backup &amp; restore, Network management &amp; Whitelisting.</p><p>Experience with current industry security standards (NIST, NCA, IEC-62443, ISO27001, etc).</p><p>Excellent troubleshooting skills to resolve complex network/application/system integration issues.</p><p><b>Nice to have:</b></p><p>CompTIA Security +.</p><p>Certified Ethical Hacker (CEH).</p><p>Splunk Fundamentals &amp; Administration.</p><p>Microsoft Certified Systems Engineer (MCSE).</p><p>Experience on SIEM solution such as (Splunk, ArcSight, Tripwire).</p><p>CISSP Certified Information Systems Security Professional or similar security certification.</p><p><b>Competencies:</b></p><p>Result oriented</p><p>Confident &ndash; ability to work with minimal supervision</p><p>Open minded- Integrative thinker</p><p>Influences without authority</p><p>Effective communicator</p><p>Customer service orientated</p><p>Job Types: Full-time, Contract<br/>Contract length: 12 months</p><p>Pay: ﷼8,000.00 - ﷼15,000.00 per month</p><p>Work Location: In person</p>

Advanced Cyber Sec ArchEngr – ICSOT

JPMorganChase

<div><b>JOB DESCRIPTION</b><p><br>
Join one of the world's most influential companies and leverage your skills in cybersecurity to have a real impact on the financial industry.</p><div><br>
</div><div>As a Lead Cybersecurity Architect at JPMorganChase within the cyber security and technology controls, you are an integral part of a team that works to develop high-quality cybersecurity solutions for various software applications on modern cloud-based technologies. As a core technical contributor, you are responsible for carrying out critical cybersecurity architecture solutions by identifying, creating, and communicating risk, mitigation options, and solutions across multiple technical areas within various business functions in support of project goals.</div><div>
</div><div><p><b>Job responsibilities</b></p><ul><li>
Architect and assess data security controls across cloud and hybrid platforms (e.g., Databricks, Snowflake, AWS, GCP) including storage, compute, analytics, and streaming services.</li><li>
Engages technical teams and business stakeholders to discuss and propose technical approaches to meet current and future cybersecurity needs</li><li>
Defines the technical target state of their cybersecurity product and drives achievement of the strategy</li><li>
Identifies opportunities to eliminate or automate remediation of recurring issues to improve overall cybersecurity of software applications and systems</li><li>
Leads evaluation sessions with external vendors, startups, and internal teams to drive continuous improvement and assess cybersecurity design and technical credentials for use in existing systems and architecture</li><li>
Leads communities of practice to drive awareness and use of new and leading-edge cybersecurity technologies</li><li>
Adds to team culture of diversity, opportunity, inclusion, and respect
</li></ul></div><p></p><div><p><b>Required qualifications, capabilities, and skills</b></p><ul><li>
Formal training or certification with 5 years experience in Data Technologies.</li><li>
Hands-on practical experience delivering enterprise-level cybersecurity solutions and controls</li><li>
Advanced in one or more programming languages. Proficiency in automation and continuous delivery methods
</li><li>Proficiency in all aspects of the Software Development Life Cycle</li><li>
Advanced understanding of agile methodologies such as continuous integration and delivery, application resiliency, and security?</li><li>
Demonstrated proficiency in software applications and technical processes within a technical discipline (e.g., public cloud, artificial intelligence, machine learning, mobile, etc.)
</li><li><p>Practical cloud native experience.
</p><p>Deep knowledge of one or more software and applications</p></li><li>
Ability to evaluate current and emerging technologies to recommend the best solutions for the future state architecture</li><li><p>
Experience effectively communicating with senior business leaders</p><p>
</p></li></ul><p></p><div><b>Preferred qualifications, capabilities, and skills</b></div><ul><li>
Proven experience in data security architecture (or security architecture with substantial data platform scope) with a track record of delivering enterprise-scale controls.</li><li><p>
Strong knowledge of:
</p><p>Data security concepts (classification, access controls, encryption, tokenization/masking, DLP, retention, secure sharing)</p></li><li><p>
Cloud security architecture for data services (storage, analytics, messaging/streaming).
</p><p>Identity and access management patterns (federation, service identities, least privilege, ABAC/RBAC)</p></li><li><p>
Experience performing threat modeling, security design reviews, and risk assessments for complex data flows and distributed systems.
</p><p>Working familiarity with secure engineering practices and common vulnerabilities (e.g., OWASP) as they apply to data APIs and services.
</p><p>Proficiency or strong working knowledge in one or more languages (e.g., Python, Java) and Infrastructure-as-Code concepts.</p></li><li><p>
Familiarity with security and privacy frameworks/regulations (e.g., NIST, GDPR, HIPAA&mdash;where applicable).
</p><p>Preferred Certifications (AWS Certified Solutions Architect, Databricks, Snowflake, Data Engineering)</p></li></ul><p>
</p></div><p></p><b>ABOUT US</b><br>
<div>
<div>JPMorganChase, one of the oldest financial institutions, offers innovative financial solutions to millions of consumers, small businesses and many of the world&rsquo;s most prominent corporate, institutional and government clients under the J.P. Morgan and Chase brands. Our history spans over 200 years and today we are a leader in investment banking, consumer and small business banking, commercial banking, financial transaction processing and asset management.
</div><p></p><div><p>We offer a competitive total rewards package including base salary determined based on the role, experience, skill set and location. Those in eligible roles may receive commission-based pay and/or discretionary incentive compensation, paid in the form of cash and/or forfeitable equity, awarded in recognition of individual achievements and contributions. We also offer a range of benefits and programs to meet employee needs, based on eligibility. These benefits include comprehensive health care coverage, on-site health and wellness centers, a retirement savings plan, backup childcare, tuition reimbursement, mental health support, financial coaching and more. Additional details about total compensation and benefits will be provided during the hiring process.
</p><div><p>We recognize that our people are our strength and the diverse talents they bring to our global workforce are directly linked to our success. We are an equal opportunity employer and place a high value on diversity and inclusion at our company. We do not discriminate on the basis of any protected attribute, including race, religion, color, national origin, gender, sexual orientation, gender identity, gender expression, age, marital or veteran status, pregnancy or disability, or any other basis protected under applicable law. We also make reasonable accommodations for applicants&rsquo; and employees&rsquo; religious practices and beliefs, as well as mental health or physical disability needs. Visit our FAQs for more information about requesting an accommodation.</p>
<p>JPMorgan Chase &amp; Co. is an Equal Opportunity Employer, including Disability/Veterans</p><br>
</div></div></div><br>
<br>
<b>ABOUT THE TEAM</b><br>
<br>
Our professionals in our Corporate Functions cover a diverse range of areas from finance and risk to human resources and marketing. Our corporate teams are an essential part of our company, ensuring that we&rsquo;re setting our businesses, clients, customers and employees up for success.</div>

Product Security - Cybersecurity Architecture

Caesars Entertainment

<p></p><div><div><div><div><div><div><div><div><p>Lead Cyber Threat Intelligence Architect</p>
</div><div><p>Las Vegas, NV, United States (Remote)
</p></div></div></div></div></div><div></div><div><div><div><div><div><p><b>WE ARE CAESARS</b><br>
<br>
At Caesars Entertainment, our Mission, Vision &amp; Values reflect our unique purpose, providing people with possibilities and places to have fun. Our Mission, Vision &amp; Values represent a unifying and inspiring way forward, and all Team Members are expected to uphold them.<br>
<br>
<b>Our Mission</b>: &ldquo;Create the Extraordinary&quot;<br>
<b>Our Vision</b>: &ldquo;We create spectacular worlds that immerse, inspire and connect you. We don&rsquo;t perform magic; we create it with excellence.&rdquo;<br>
<b>Our Values</b>: &ldquo;Blaze the Trail, Together We Win, All-In on Service&rdquo;<br>
<br>
Our corporate social responsibility framework, People Planet Play, represents our continuous dedication to enhancing economic development, uplifting the wellbeing of our Team Members and their families, and making positive contributions to the communities we operate in.</p></div>
</div></div></div></div><div><div><div><div><div><div><h2 class="jobSectionHeader"><b>JOB SUMMARY</b></h2>
<div><div>As a Information Security Senior Architect, you will contribute to significantly building the foundation of the offensive security team. This will include performing industry research on various threats, and being a SME on internal security architecture and design that would allow the offensive security team to understand areas of weakness or vulnerabilities to enhance enhancing the firm's cybersecurity or resiliency posture. The senior architect will assist in developer of process and procedure for the offensive security team as it builds out a world class team.<br>
<br>
The Information Security Senior Architect will play a role in researching various technologies across many different proficiencies. The successful candidate will be able to demonstrate a general knowledge of computer networking fundamentals, modern threats and vulnerabilities, attack methodologies, and penetration testing tools. The Offensive Security Team consists of highly skilled and qualified members who conduct advanced adversary emulation operations to replicate cybersecurity threats targeting the firm.</div></div>
</div></div><div><div><h2 class="jobSectionHeader"><b>HOW YOU WILL CREATE THE EXTRAORDINARY</b></h2>
<div><div><ul><li><div><b>Manage Pen Testing Engagements </b>&ndash; Ability to coordinate with multiple 3rd party vendors for various pen testing engagements</div></li></ul></div><div><ul><li><div><b>
Manage Bug Bounty</b> &ndash; Ability to manage various aspects of a bug bounty program, including but not limited to engaging with submissions and responses, testing/retesting and partnering with business lines and vendors</div></li></ul></div><div><ul><li><div><b>
Policy and Procedures</b> &ndash; Assist in policy and process development for the Offensive Security Team amongst various teams and disciplines (cyber threat intelligence, threat hunting, adversary emulation)</div></li></ul></div><div><ul><li><div><b>
Conduct Threat Assessments and Threat Research:</b> Explore various technologies and solutions to understand information security risks and weaknesses. Perform threat research on various industry threats, vulnerabilities, and attack vectors to understand potential weaknesses in security defenses and where security mitigations need to be enhanced.</div></li></ul></div><div><ul><li><div><b>
Threat Modeling: </b>Conduct threat modeling to understand most relevant threats to Caesars</div></li></ul></div><div><ul><li><div><b>
Lead cross-team educational sessions and training:</b> Lead sessions across internal security teams and across the entire company that detail relevant threats and information that business professionals need to understand as the threat landscape evolves</div></li></ul></div><div><ul><li><div><b>
Collaboration:</b> Work closely with the IT and security teams to understand current security architecture and assist in developing strategies to mitigate identified risks.</div></li></ul></div><div><ul><li><div><b>
Compliance:</b> Ensure that penetration testing activities adhere to relevant compliance standards and regulations, including those specific to the casino industry such as PCI-DSS and other gaming regulations.</div></li></ul></div><div><ul><li><div><b>
Continuous Improvement:</b> Stay current with the latest security trends, techniques, and vulnerabilities, and apply this knowledge to continuously improve the security posture of the casino.</div></li></ul></div><div><ul><li><div><b>
Training and Awareness: </b>Provide guidance and training to internal teams on best practices for security and how to address identified vulnerabilities.</div></li></ul></div></div>
</div></div><div><div><h2 class="jobSectionHeader"><b>WHAT YOU WILL NEED</b></h2>
<div><div><ul><li><div>3-5 years of experience in cybersecurity with a focus on threat research or analysis.</div></li></ul></div><div><ul><li><div>
Experience with security tools and technologies, such as SIEM, next generation firewalls, endpoint protection, and threat intelligence platforms</div></li></ul></div><div><ul><li><div>
Strong understanding of the following: networking fundamentals (all OSI layers, protocols); Windows/ Linux/Unix/Mac operating systems as well as software vulnerability and exploitation techniques</div></li></ul></div><div><ul><li><div>
Familiarity with system administration skills such as configuration, maintenance, and interpretation of log output from networking devices, operating systems, and infrastructure services, as well as with cloud architecture, operations, and security vulnerabilities</div></li></ul></div><div><ul><li><div>
Experience in multiple businesses or verticals, with organizational and cultural understanding of call centers, payments processes, and client service/sales organizations</div></li></ul></div><div><ul><li><div>
Expertise in collaborating with high-performing teams and individuals throughout the firm to accomplish common goals</div></li></ul></div><div><ul><li><div>
Knowledge of US financial services sector cybersecurity or resiliency organization practices, operations risk management processes, principles, regulations, threats, risks, and incident response methodologies</div></li></ul></div><div><ul><li><div>
Ability to identify systemic security or resiliency issues as they relate to threats, vulnerabilities, or risks, with a focus on recommendations for enhancements or remediation, and proficiency in multiple security assessment methodologies (e.g., Open Worldwide Application Security Project (OWASP) Top Ten, National Institute of Standards and Technology (NIST) Cybersecurity Framework), offensive testing tools, or resiliency testing equivalents</div></li></ul></div></div>
</div></div></div></div></div></div><div><div><div><div><div><div><h2 class="jobSectionHeader"><b>ABOUT US</b></h2>
<div>At Caesars Entertainment, Inc., our Team Members create the extraordinary. We are the largest casino-entertainment company in the U.S. and one of the world's most diversified casino-entertainment providers. Since beginning in Reno, Nevada, in 1937, Caesars Entertainment has grown through the development of new resorts, expansions and acquisitions. Our resorts operate primarily under the Caesars&reg;, Harrah's&reg;, Horseshoe&reg; and Eldorado&reg; brand names. We focus on building loyalty and value with our guests through a combination of impeccable service, operational excellence and technological leadership. The company is committed to its Team Members, suppliers, communities and the environment through its PEOPLE PLANET PLAY framework.<br>
<br>
Our Caesars family is driven by our Mission, Vision and Values. We take great pride in living these values &ndash; Together We Win, All In On Service and Blaze the Trail &ndash; every day. Our mission, &ldquo;Create the Extraordinary&rdquo;. Our vision, &ldquo;Create spectacular worlds. That immerse, inspire and connect you. We don&rsquo;t perform magic; we create it with excellence. #WeAreCaesars&rdquo;. If you are ready to create some magic, we invite you to explore our dynamic, yet unique, career opportunities.</div><br>
</div></div></div></div></div></div><div><div><div><div><div><p><b>TOGETHER WE WIN</b><br>
<br>
We believe in delivering family-style service&mdash;an approach that fosters warmth, connection, and a genuine sense of belonging. Our team treats every guest and colleague with the same care and hospitality we would extend to family, creating a welcoming environment built on respect, teamwork, and personalized attention. Whether assisting customers or collaborating with coworkers, we prioritize service that is thoughtful, supportive, and rooted in genuine relationships.<br>
<br>
<b>DISCLAIMER</b><br>
<br>
These statements are intended to describe the general nature and level of work being performed in this position. They are not intended to be construed as an exhaustive list of all responsibilities, duties and skills required of the position. The Company reserves the right to make changes to the job description whenever necessary.<br>
<br>
As part of the onboarding process for new hires, candidates will be required to complete a background check. In addition, pre-employment drug testing is mandatory for any role operating a motor vehicle (Valet, Bus Drivers, Limo Drivers), Facilities and/or Engineering, Lifeguards, Pilots, Security and Surveillance roles. Pre-employment screenings will be completed prior to an offer being extended, except where applicable law requires that such pre-employment screening may occur post-offer. The Company is an equal opportunity employer and does not discriminate against employees or applicants based on race, color, national origin, sex, age over 40, religion, disability, sexual orientation, gender identity or expression, veteran status, marital status, or any other characteristic protected by law.<br>
<br>
<b>ADA</b><br>
<br>
Caesars Entertainment will engage in an interactive process and make reasonable accommodations, as required by law, for individuals with disabilities or to accommodate pregnancy, pregnancy-related conditions, or where a conflict exists between the position and an individuals&rsquo; religious beliefs or practices.<br>
<br>
<b>EQUAL EMPLOYMENT OPPORTUNITY</b><br>
<br>
Caesars Entertainment is an Equal Opportunity Employer. Caesars Entertainment will not discriminate against any employee or applicant based upon a person&rsquo;s race, color, creed, religion, national origin, sex, marital status, disability, status with regard to public assistance, age, sexual or affectional orientation, gender identity, familial status, ancestry, local human rights commission activity, citizenship, genetic information, protected veteran or military status, or any other protected class.</p></div></div></div></div></div></div></div></div><p></p>

Lead Cyber Threat Intelligence Architect

<div><p><b>AI, Security Architect</b></p>
<p>
At BNY, our culture allows us to run our company better and enables employees&rsquo; growth and success. As a leading global financial services company at the heart of the global financial system, we influence nearly 20% of the world&rsquo;s investible assets. Every day, our teams harness cutting-edge AI and breakthrough technologies to collaborate with clients, driving transformative solutions that redefine industries and uplift communities worldwide.</p>
<p>
Recognized as a top destination for innovators, BNY is where bold ideas meet advanced technology and exceptional talent. Together, we power the future of finance &ndash; and this is what #LifeAtBNY is all about. Join us and be part of something extraordinary.</p>
<p>
We&rsquo;re seeking a future team member for the role of AI Security Architect to join our Cybersecurity team. This role can be in Pittsburgh, PA or Lake Mary, FL or NYC, NY.</p>
<p><b>Overview</b></p>
<p>
BNY is seeking a AI Security Architect to lead the design, implementation, and governance of security controls for AI/ML systems across the enterprise. This role will define the target architecture and security patterns for AI-enabled products and platforms, ensuring resilient, compliant, and trustworthy AI. The ideal candidate combines deep expertise in cybersecurity and cloud with hands-on knowledge of modern AI/ML infrastructure, data protection, adversarial threat models, and secure MLOps.</p>
<p><b>
Primary Responsibilities</b></p>
<ul>
<li>Define enterprise AI security architecture: develop reference architectures, guardrails, and standards for secure data pipelines, model training/inference, and AI-integrated applications across on-prem and cloud.</li>
<li>Secure MLOps/ML platforms: architect identity, secrets management, network segmentation, and least-privilege access for feature stores, model registries, orchestration, and deployment pipelines.</li>
<li>Data protection by design: establish controls for sensitive data ingestion, anonymization/pseudonymization, encryption (at rest/in transit), tokenization, and lineage across AI workflows.</li>
<li>Adversarial ML defense: design controls and tests for model poisoning, evasion, model theft/exfiltration, prompt injection, jailbreaking, data leakage, and output manipulation.</li>
<li>AI supply chain security: govern third-party models, APIs, and datasets; enforce SBOMs for AI components; evaluate provenance, licensing, and dependency risk.</li>
<li>Policy and governance integration: translate AI security requirements into actionable standards and control evidence; align with enterprise risk, compliance, and model governance processes.</li>
<li>Threat modeling and security testing: lead threat modeling for AI systems; design red-teaming and secure evaluation methods for models and agents; integrate chaos/resilience testing.</li>
<li>Secure development lifecycle: embed AI-specific security checks (static/dynamic scans, IaC policy-as-code, data quality gates, bias/robustness checks) into CI/CD and change management.</li>
<li>Runtime protection: implementing guardrails, content filters, output validation, rate limiting, anomaly detection, and monitoring for AI services and agentic workflows.</li>
<li>Observability and incident response: define logging/telemetry (model inputs/outputs, drift, performance, safety events); integrate AI-specific playbooks into SOC operations.</li>
<li>Zero Trust for AI: design identity-aware access, micro-segmentation, and continuous verification for data scientists, services, and agents.</li>
<li>Privacy and ethics controls: partner with privacy and legal to operationalize consent, minimization, purpose limitation, and responsible AI guardrails, including human-in-the-loop where appropriate.</li>
<li>Resilience and continuity: design disaster recovery, backup/restore, model reproducibility, and contingency plans for AI platforms and critical use cases.</li>
<li>Vendor/platform assessments: evaluate cloud AI services, open-source frameworks, and commercial tools for security posture, compliance, and fit-for-purpose.</li>
<li>Risk management: lead control testing and risk assessments for AI initiatives; document residual risks and remediation plans; support audits and regulatory queries.</li>
<li>Reference implementations: deliver secure patterns, sample code, and automation (e.g., reusable Terraform/Policy-as-Code, secrets patterns, logging schemas) to accelerate adoption.</li>
<li>Stakeholder leadership: partner with platform engineering, data science, enterprise architecture, cyber operations, and product teams to drive end-to-end secure outcomes.</li>
<li>Coaching and enablement: build education and guidance for architects, data scientists, and engineers on secure AI practices, design patterns, and common pitfalls.</li>
<li>Continuous improvement: track emerging threats, standards, and best practices; lead updates to architecture and controls; measure effectiveness via KPIs and control health.</li>
</ul>
<p><b>Required Qualifications</b></p>
<ul>
<li>12 years in cybersecurity/enterprise security architecture with 3 years focused on AI/ML or data platform security at scale.</li>
<li>Expertise in cloud security (AWS/Azure/GCP) including identity, secrets management, key management (KMS/HSM), network segmentation, and policy-as-code.</li>
<li>Strong knowledge of AI/ML workflows: data ingestion/feature engineering, model training/inference, MLOps tooling (model registry, orchestrators, serving).</li>
<li>Practical experience with adversarial ML concepts and defenses; familiarity with model robustness, prompt injection risks, and secure evaluation methods.</li>
<li>Proficiency in designing observability/telemetry for AI systems (e.g., logging prompts/outputs, drift/quality metrics, safety events) with SIEM/SOAR integration.</li>
<li>Hands-on with infrastructure-as-code (Terraform/CloudFormation), CI/CD, and secure SDLC practices tailored to data/ML systems.</li>
<li>Deep understanding of data protection (encryption, tokenization, anonymization), privacy by design, and secure data lifecycle management.</li>
<li>Strong stakeholder management and communication skills; ability to convert complex risks into clear architecture decisions and implementation guidance.</li>
</ul>
<p><b>Preferred Qualifications</b></p>
<ul>
<li>Experience architecting secure AI agents and LLM applications including guardrails, content filters, and output validation.</li>
<li>Familiarity with standards and frameworks relevant to AI and data (e.g., NIST AI RMF, cloud CIS benchmarks, OWASP for ML/LLM, privacy controls).</li>
<li>Background in model governance and risk management (e.g., testing for drift, bias, stability, and explainability) and integration with enterprise control frameworks.</li>
<li>Programming/scripting proficiency (Python preferred) for reference implementations, automation, and security tooling integrations.</li>
<li>Experience with container security, Kubernetes, service mesh, and microservices patterns in AI platforms.</li>
<li>Prior leadership in enterprise-scale transformations, enabling secure adoption of AI across multiple business lines.</li>
</ul>
<p>At BNY, our culture speaks for itself, check out the latest BNY news at:</p>
<p>
BNY Newsroom</p>
<p>
BNY LinkedIn</p>
<p> Here&rsquo;s a few of our recent awards:</p>
<ul>
<li>America&rsquo;s Most Innovative Companies, Fortune, 2025</li>
<li>World&rsquo;s Most Admired Companies, Fortune 2025</li>
<li>&ldquo;Most Just Companies&rdquo;, Just Capital and CNBC, 2025</li></ul><br>
<p><br>
Our Benefits and Rewards:</p>
<p>
BNY offers highly competitive compensation, benefits, and wellbeing programs rooted in a strong culture of excellence and our pay-for-performance philosophy. We provide access to flexible global resources and tools for your life&rsquo;s journey. Focus on your health, foster your personal resilience, and reach your financial goals as a valued member of our team, along with generous paid leaves, including paid volunteer time, that can support you and your family through moments that matter.</p><p><br>
BNY assesses market data to ensure a competitive compensation package for our employees. The base salary for this position is expected to be between $142,000 and $259,000 per year at the commencement of employment. However, base salary if hired will be determined on an individualized basis, including as to experience and market location, and is only part of the BNY total compensation package, which, depending on the position, may also include commission earnings, discretionary bonuses, short and long-term incentive packages, and Company-sponsored benefit programs.<br>
This position is at-will and the Company reserves the right to modify base salary (as well as any other discretionary payment or compensation) at any time, including for reasons related to individual performance, change in geographic location, Company or individual department/team performance, and market factors.</p></div>

AI Security Architect

Search 10000+ Cyber security architect jobs near you this May. New roles added regularly across leading industries. Apply today.