cyber security architect

Honeywell

<div><p>The Sr Advanced Cyber Security Architect/Engineer reports to the Product Security Assurance Leader and will be responsible for assessing and evaluating the security posture of a variety of Honeywell Products and partner technologies. This role will be responsible for security services delivery, which may include use of application/network/firmware/hardware security toolsets, detection of security defects, and remediation consultation of those weaknesses. Our services support the identification of potential attack techniques and serve as the foundation for continuously improving the product development lifecycle.
</p><p><b>RESPONSIBILITIES
</b></p><ul><li>Individual Contributor with Product Security Assurance Team.
</li><li>Provide mentorship, expertise and direction to junior team members.
</li><li>Deliver Security Testing across all of Industrial Automation.
</li><li>Assist in the development of modular, repeatable, effective Security Testing processes .
</li><li>Partner with Tools and Technology Team to select, implement, develop, and automate testing with appropriate tools.
</li><li>Work with cross functional teams to develop remediation suggestions.
</li><li>Report observations using our standardized reporting structure.
</li><li>The engineer may frequently lift and/or move up to 25 pounds.</li></ul></div>
<br><div><p><b>YOU MUST HAVE
</b></p><ul><li>Bachelor&rsquo;s degree in computer science or software engineering, electrical engineering or equivalent experience.
</li><li>7+ years demonstrated experience in penetration testing or 5+ years demonstrated experience in penetration testing and 2+ years of application development.
</li></ul><p><b>WE VALUE
</b></p><ul><li>Experience in pentesting &ndash; Web, Mobile App, Thick Client, API, Web services, Hardware, Cloud, Containers.
</li><li>Exposure to ICS pentesting.
</li><li>Understanding of application protocols, development, and common attack vectors. .
</li><li>Good cybersecurity capabilities and strong software engineering skills.
</li><li>Excellent understanding of security by design principles and architecture level security concepts.
</li><li>Ability to script advanced attacks.
</li><li>Ability to fuzz applications and protocols for new vulnerabilities and able to fully exploit newly discovered vulnerabilities.
</li><li>Ability to discover advanced logic flaws and multiple step architectural errors.
</li><li>Experience and knowledge of penetration testing methodologies and tools.
</li><li>Up to date knowledge of current and emerging security threats and techniques for exploiting security vulnerabilities.
</li><li>Demonstrated project management skills.
</li><li>Effective oral and written communication skills.
</li><li>Good interpersonal skills.
</li><li>Experience in security testing within the appropriate domain
</li><li>Relevant Security certifications (Eg: CEH, OSCP, OSWE, etc.,)
</li><li>Public speaking at Technical Conferences.
</li><li>Familiarity with reverse engineering tools, debuggers, and dynamic analysis techniques.
</li><li>Experience in integrating pentest tools to CI/CD pipeline.
</li></ul><p><b>THE BUSINESS UNIT
</b><br>
Honeywell Industrial Automation enables process industry operations, creates world-class sensor technologies, automates supply chains, makes warehouses smarter, and improves worker safety. This combination builds on our core strengths in controls and automation technologies which in turn allows us to deliver better commercial outcomes for our customers. We enable customers to enhance the safety, sustainability, resiliency and productivity of their people, plants and assets.<br>
</p><p></p><p><b>ABOUT HONEYWELL
</b><br>
Honeywell International Inc. (Nasdaq: HON) invents and commercializes technologies that address some of the world&rsquo;s most critical challenges around energy, safety, security, air travel, productivity, and global urbanization. We are a leading software-industrial company committed to introducing state-of-the-art technology solutions to improve efficiency, productivity, sustainability, and safety in high-growth businesses in broad-based, attractive industrial end markets. Our products and solutions enable a safer, more comfortable, and more productive world, enhancing the quality of life of people around the globe. Learn more about Honeywell: (https://www.honeywell.com/us/en)
</p><p>The application period for the job is estimated to be 40 days from the job posting date; however, this may be shortened or extended depending on business needs and the availability of qualified candidates. Posting Date: April, 13, 2026.</p></div>
<br><div>Honeywell helps organizations solve the world's most complex challenges in automation, the future of aviation and energy transition. As a trusted partner, we provide actionable solutions and innovation through our Aerospace Technologies, Building Automation, Energy and Sustainability Solutions, and Industrial Automation business segments &ndash; powered by our Honeywell Forge software &ndash; that help make the world smarter, safer and more sustainable.</div>

Sr Advanced Cyber Security Architect/Engineer

Akima

<div>Company Overview:<p></p><p><b><br>
Work Where it Matters</b></p><p></p><p><br>
Suvi, an Akima company, is not just another federal mission services contractor. As an Alaska Native Corporation (ANC), our mission and purpose extend beyond our exciting federal projects as we support our shareholder communities in Alaska.</p><p></p><p><br>
At Suvi, the work you do every day makes a difference in the lives of our 15,000 I&ntilde;upiat shareholders, a group of Alaska natives from one of the most remote and harshest environments in the United States.</p><p></p><p><b><br>
For our shareholders</b>, Suvi provides support and employment opportunities and contributes to the survival of a culture that has thrived above the Arctic Circle for more than 10,000 years.</p><p></p><p><b><br>
For our government customers</b>, Suvi delivers subject matter experts, an agile management approach, and innovative technologies that accomplish customers&rsquo; missions safely, securely, and efficiently.</p><p></p><p><b><br>
As a Suvi employee</b>, you will be surrounded by a challenging, yet supportive work environment that is committed to innovation and diversity, two of our most important values. You will also have access to our comprehensive benefits and competitive pay in addition to growth opportunities and excellent retirement options.</p>
Description:
<div></div><div><div><div><div><div><div><div><p>
Suvi is seeking a dedicated Cyber Engineer III to support our TSA Enterprise Architecture team in Springfield, VA. To join our team of outstanding professionals, apply today!</p><p></p><p><br>
The ideal candidate will deliver outstanding customer service, strong technical expertise and a mission-driven work ethic. The Cyber Engineer III will provide specialized expertise in enterprise cybersecurity architecture and modernization initiatives under the EASS contract. Will report to the Lead Architect and Program Lead while directly supporting the Architecture &amp; Data Management Branch (ADMB). This role ensures that security architecture principles are fully integrated into all TSA modernization and transformational efforts. Will act as a forward-thinking change agent, modernizing TSA&rsquo;s approach to cybersecurity while enabling the secure infusion of disruptive technologies such as Intelligent Automation and Artificial Intelligence (IAAI), cloud, Zero Trust, biometrics, and next-generation screening capabilities. Will supports secure, scalable and resilient architectures that align with TSA&rsquo;s mission to protect the nation&rsquo;s transportation systems.
</p></div></div></div></div></div></div></div>Responsibilities:
<ul><li>Develop and maintain as-is and to-be security architectures across enterprise, portfolio and solution levels, including identity management, aviation system security, and layered defenses.</li><li>
Integrate enterprise security architecture domain principles with program-and project-level security assessments and modernization activities.</li><li>
Conduct gap analyses, impact analyses, risk assessments, and technical debt evaluations to support secure modernization and transformational efforts.</li><li>
Provide forward-thinking expertise on emerging technologies and special domains (e.g., Zero Trust, IoT, biometrics, mobile, cloud, AI/IAAI) and their associated security implications.</li><li>
Support the design and evaluation of security systems, policies, and technologies to mitigate cyber threats while aligning with TSA business objectives and risk appetite.</li><li>
Contribute to secure modernization roadmaps, including migration from monolithic applications to open and robust platforms.</li><li>
Collaborate with TSA functional areas to embed security into Analysis of Alternatives (AoAs), white papers, strategies, and next-generation planning activities.</li><li>
Participate in governance processes, FITARA reviews, and technology insertion evaluations with a security and modernization focus.</li><li>
Provide thought leadership on federal cybersecurity policy, NIST Cybersecurity Framework (CSF) 2.0, and layered security approaches for Transportation Screening Equipment (TSE) and other TSA domains.</li></ul>
Qualifications:
<ul><li>U.S. Citizenship.</li><li>
Active Secret security clearance.</li><li>
Bachelor&rsquo;s degree in Cybersecurity, Computer Science, Information Systems or related field.</li><li>
8+ years of progressive experience in cybersecurity architecture, enterprise security, or IT modernization in federal or large-scale environments.</li><li>
Strong knowledge of federal cybersecurity policies, standards, and frameworks (NIST CSF, Zero Trust, FISMA).</li><li>
Demonstrated experience integrating security into enterprise architecture and modernization initiatives.</li><li>
Excellent analytical, communication and collaboration skills.</li></ul><p><b>
Preferred Skills:</b></p><ul><li>
Master's degree.</li><li>
Experience supporting TSA, DHS, or other federal transportation/security agencies.</li><li>
Hands-on knowledge of modern security technologies (Zero Trust, biometrics, cloud security, AI/ML security).</li><li>
Familiarity with FEAF v2.0, DoDAF, ServiceNow, and EA modeling tools (e.g., Ins-Pi/YouDesign).</li><li>
Certifications such as CISSP, CCSP, TOGAF, or Certified Enterprise Architect.</li><li>
Understanding of Transportation Screening Equipment (TSE) security and aviation system security domains.</li></ul>
Job ID: 2026-22535 Work Type: On-Site</div>

Cyber Architect III

COZMALABS

<p>We are seeking a highly skilled and motivated Cyber Security Architect with strong system, on prem and Cloud Security expertise to oversee and enhance the organization&rsquo;s internal security architecture, controls, and policies while actively contributing to external security initiatives and projects.</p><p>This role combines strategic architecture leadership, hands-on implementation, security research, operations oversight, and cloud security engineering, with a strong focus on Microsoft environments such as Microsoft 365, Microsoft azure , and OS security.</p><p>The ideal candidate will possess deep expertise in enterprise security architecture, domain security, on-prem and hybrid infrastructure protection, cloud-native security controls, and DevSecOps integration.</p><p>Experience Requirements</p><ul><li>Minimum 7+ years in system and Cloud Security role.</li><li>Proven experience in enterprise security architecture (on-prem + cloud)</li><li>Experience in security research, security operations, and security assurance</li><li>Experience in setting and documenting security processes and procedures in compliance with Qatar NCSA guidelines and security best practices.</li><li>Experience in operating system and infrastructure hardening.</li></ul><p>Key Responsibilities</p><ul><li>Design, implement, and maintain enterprise-wide security architecture for the company internal security, user devices, cloud, and hybrid environments.</li><li>Develop and enforce security policies, standards, and procedures.</li><li>Lead security risk assessments and define mitigation strategies.</li><li>Align security controls with business objectives and regulatory requirements.</li><li>Oversee internal security governance and compliance frameworks (ISO 27001, NIST, CIS).</li><li>Architect and secure Azure cloud environments (IaaS, PaaS, SaaS).</li><li>Implement cloud-native and third-party security controls.</li><li>Conduct detailed security assessments of cloud services to ensure compliance with internal policies and industry frameworks.</li><li>Identify and remediate misconfigurations using automated scanning and manual inspection.</li><li>Implement secure cloud architecture patterns and service integrations.</li><li>Contribute to threat modeling and cloud risk assessments.</li><li>Ensure secure hybrid integration between on-prem and Azure environments.</li><li>Secure Active Directory and domain environments.</li><li>Implement GPO hardening and identity security controls.</li><li>Manage IAM, RBAC, MFA, and privileged access strategies.</li><li>Harden Windows/Linux servers and enterprise endpoints.</li><li>Oversee firewall configurations, IDS/IPS, VPN security, and segmentation.</li><li>Implement encryption and data protection strategies.</li><li>Perform vulnerability assessments and coordinate penetration testing.</li><li>Develop scripts and automation tools (PowerShell, Python, Bash) to enhance monitoring and compliance validation.</li><li>Integrate security controls within CI/CD pipelines (DevSecOps practices).</li><li>Monitor emerging threats, tools, and vulnerabilities.</li><li>Evaluate security technologies and recommend improvements.</li><li>Contribute to threat modeling exercises.</li><li>Participate in external security architecture and implementation projects.</li><li>Provide technical advisory for client-facing security initiatives.</li><li>Review third-party security integrations and solutions.</li><li>Support pre-sales security design when required.</li><li>Conduct risk assessments and compliance audits.</li><li>Ensure adherence to CIS Benchmarks, NIST, ISO 27001.</li><li>Develop remediation guidance and contribute to policy development.</li><li>Participate in external security architecture and implementation projects.</li><li>Provide technical advisory for client-facing security initiatives.</li><li>Review third-party security integrations and solutions.</li><li>Support pre-sales security design when required.</li></ul><p>Required Technical Expertise</p><ul><li>Deep technical understanding and hands on of:</li></ul><p>Cloud &amp; Security Platforms</p><ul><li>Cloud security.</li><li>Data protection strategies</li><li>Zero Trust Architecture</li></ul><p>Infrastructure &amp; Systems Security</p><ul><li>Active Directory and Microsoft 365 hardening</li><li>User devices security</li><li>Domain security best practices</li><li>Endpoint security solutions</li><li>Hybrid identity solutions</li></ul><p>DevSecOps &amp; Automation</p><ul><li>CI/CD security integration</li><li>Secure coding awareness</li><li>Security automation scripting</li></ul><p>Certifications (Required / Strongly Preferred)</p><ul><li>CISSP &ndash; Certified Information Systems Security Professional</li><li>CCSP &ndash; Certified Cloud Security Professional</li><li>CISM &ndash; Certified Information Security Manager</li><li>Microsoft Azure Security Engineer Associate (AZ-500)</li><li>CompTIA Security+ (Foundational)</li></ul><p>Education</p><p>Bachelor&rsquo;s degree in Cyber Security, Computer Science, Information Systems, or related field (Master&rsquo;s preferred).</p><p>Work Location: In person</p>

Cybersecurity

Virtu Thinko

<p>Advanced Cyber Sec Arch\Engr &ndash; ICS\OT</p><p><b>Overview</b></p><p>This position is responsible for providing onsite and offsite cyber security services associated with industrial Process Control Networks for Company customers in the Oil and Gas; Hydrocarbon Processing; Power Generation; Pulp, Paper &amp; Printing; Continuous Web Solutions; Petrochemicals; Life Sciences; and Metals, Minerals and Mining markets. Services provided include on-site and offsite consulting, troubleshooting, network designs, implementation, assessments, and other related tasks as identified. Responsibilities of the Position</p><p><b>Act as primary customer interface to ensure proposed solutions meet their business needs.</b>Maintain technical competency with the Company Process Solutions security and networking product/systems portfolio, while maintaining expert knowledge on specific designatedsecurity/network disciplines.<b>Develop sound and trusted relationships with internal and external customers by providing accurate and efficient technical/engineering support.</b>Respond to customer inquiries, questions, and issues by diagnosing problems and providing the most appropriate technical solution in an accurate and timely manner.<b>Maintain knowledge of current industry security standards such as NIST, NCA, IEC-62443, ISO27001, etc.</b>Maintain cyber security certifications.<b>Requires 30&ndash; 65% travel</b></p><p><b>Qualifications &amp; Experience:</b></p><p>Bachelor&rsquo;s degree in a computer related field such as Computer Science, Computer informationsystems degree with a minimum of 7 years&rsquo; experience in industrial automation network systems.</p><p><b>Must have:</b></p><p>Networking certs (CCNA).</p><p>Cyber Security Risk Analysis.</p><p>5+ years Industrial Networking.</p><p>Linux/Windows Security Basics.</p><p>5+ years Leading Security Projects.</p><p>Strong Virtualization Experience (VCP).</p><p>5+ years Performing Audits/Assessments.</p><p>Familiarity with Industrial Site&rsquo;s Safety Requirements.</p><p>5+ years&rsquo; Experience within Industrial Process Control.</p><p>Microsoft &ndash; Active Directory, DNS, WSUS, Terminal Server.</p><p>Experience in LAN/WAN architectures &amp; Purdue ICS model.</p><p>Process Control System Design/Implementation Knowledge.</p><p>Experience designing and optimizing complex LAN environments.</p><p>Global Industrial Cyber Security Professional (GICSP) certification.</p><p>Cisco Certified Network/Design/Security Professional (at least one).</p><p>Experience different firewall vendors (Cisco, Juniper, Palo alto, Fortinet).</p><p>Experience performing cybersecurity/network/system services at customer sites.</p><p>Experience with anti-virus systems, backup &amp; restore, Network management &amp; Whitelisting.</p><p>Experience with current industry security standards (NIST, NCA, IEC-62443, ISO27001, etc).</p><p>Excellent troubleshooting skills to resolve complex network/application/system integration issues.</p><p><b>Nice to have:</b></p><p>CompTIA Security +.</p><p>Certified Ethical Hacker (CEH).</p><p>Splunk Fundamentals &amp; Administration.</p><p>Microsoft Certified Systems Engineer (MCSE).</p><p>Experience on SIEM solution such as (Splunk, ArcSight, Tripwire).</p><p>CISSP Certified Information Systems Security Professional or similar security certification.</p><p><b>Competencies:</b></p><p>Result oriented</p><p>Confident &ndash; ability to work with minimal supervision</p><p>Open minded- Integrative thinker</p><p>Influences without authority</p><p>Effective communicator</p><p>Customer service orientated</p><p>Job Types: Full-time, Contract<br/>Contract length: 12 months</p><p>Pay: ﷼8,000.00 - ﷼15,000.00 per month</p><p>Work Location: In person</p>

Advanced Cyber Sec ArchEngr – ICSOT

Wipro

<div>Job Description<p></p><div><div><ul><li><div><b><br>
</b><br>
</div></li></ul></div></div><div><div><div><div>Job Title: SECURITY ARCHITECT L1(CONTRACT)
</div></div></div></div><div><div><div><div>City: Princeton
</div></div></div></div><div><div><div><div>State/Province: New Jersey
</div></div></div></div><div><div><div><div>Posting Start Date: 4/13/26
</div></div></div></div><div><div><div><div>Wipro Limited (NYSE: WIT, BSE: 507685, NSE: WIPRO) is a leading technology services and consulting company focused on building innovative solutions that address clients&rsquo; most complex digital transformation needs. Leveraging our holistic portfolio of capabilities in consulting, design, engineering, and operations, we help clients realize their boldest ambitions and build future-ready, sustainable businesses. With over 230,000 employees and business partners across 65 countries, we deliver on the promise of helping our customers, colleagues, and communities thrive in an ever-changing world. For additional information, visit us at www.wipro.com.
</div></div></div></div><div><div><div><div>Job Description:
<div><div><div><h2 class="jobSectionHeader"><b>Job Description
</b></h2></div><div><p><b>Role Purpose
</b></p><p>The purpose of this role is to design the organisation&Atilde;&cent;&Acirc;&Acirc;s computer and network security infrastructure and protect its systems and sensitive information from cyber threats
</p></div></div><div><div><h2 class="jobSectionHeader"><b>͏
</b></h2></div><div><p><b>Do
</b></p><p>1. Design and develop enterprise cyber security strategy and architecture
</p><p>a. Understand security requirements by evaluating business strategies and conducting system security vulnerability and risk analyses
</p><p>b. Identify risks associated with business processes, operations,
</p><p>information security programs and technology projects
</p><p>c. Identify and communicate current and emerging security threats and design security architecture elements to mitigate threats as they emerge
</p><p>d. Identify security design gaps in existing and proposed architectures and recommend changes or enhancements
</p><p>e. Provide product best fit analysis to ensure end to end security covering different faucets of architecture e.g. Layered security, Zoning, Integration aspects, API, Endpoint security, Data security, Compliance and regulations
</p><p>f. Demonstrate experience in doing security assessment against NIST Frameworks, SANS, CIS, etc.
</p><p>g. Provide support during technical deployment, configuration, integration and administration of security technologies
</p><p>h. Demonstrate experience around ITIL or Key process-oriented domains like incident management, configuration management, change management, problem management etc.
</p><p>i. Provide assistance for disaster recovery in the event of any security breaches, attacks, intrusions and unusual, unauthorized or illegal activity
</p><p>j. Provide solution of RFP&Atilde;&cent;&Acirc;&Acirc;s received from clients and ensure overall design assurance
</p></div></div><div><div><h2 class="jobSectionHeader"><b>͏
</b></h2></div><div><p>i. Develop a direction to manage the portfolio of to-be-solutions including systems, shared infrastructure services, applications, hardware related to cyber risk security in order to better match business outcome objectives
</p><p>ii. Analyse technology environment, enterprise specifics, client requirements to set a collaboration design framework/ architecture
</p><p>iii. Depending on the client&Atilde;&cent;&Acirc;&Acirc;s need with particular standards and technology stacks create complete RFPs
</p><p>iv. Provide technical leadership to the design, development and implementation of custom solutions through thoughtful use of modern technology
</p><p>v. Define and understand current state solutions and identify improvements, options &amp; tradeoffs to define target state solutions
</p><p>vi. Clearly articulate and sell architectural targets, recommendations and reusable patterns and accordingly propose investment roadmaps
</p><p>vii. Evaluate and recommend solutions to integrate with overall technology ecosystem
</p><p>viii. Tracks industry and application trends and relates these to planning current and future IT needs
</p></div></div><div><div><h2 class="jobSectionHeader"><b>͏
</b></h2></div><div><p><b>2. Stakeholder coordination &amp; audit assistance
</b></p><p>a. Liaise with stakeholders in relation to cyber security issues and provide timely support and future recommendations
</p><p>b. Provide assistance in maintaining an information security risk register and help with internal and external audits relating to information security
</p><p>c. Support audit of security best practices and implementation of security principles across the organization, to meet business goals along with customer and regulatory requirements
</p><p>d. Assist with the creation, maintenance and delivery of cyber security awareness training to team members and customers
</p><p>e. Provide training to employees on issues such as spam and unwanted or malicious emails
</p></div></div><div><div><h2 class="jobSectionHeader"><b>͏
</b></h2></div><div><p><b>Deliver
</b></p><div><div><div><div><b>No </b></div><div><b>Performance Parameter </b></div><div><b>Measure
</b></div></div><br>
<div><div>1 </div><div>Customer centricity </div><div>Timely security breach solutioning to end users, Internal stakeholders &amp; external customers experience, CSAT, educating and suggesting right control to the customers.
</div></div><br>
<div><div>2 </div><div>Support sales team to create wins </div><div>% of proposals with Quality Index &gt;7, timely support of the proposals, identifying opportunities/ leads to sell services within/ outside account (lead generation), no. of proposals led<br>
</div></div><br>
</div></div></div></div></div></div></div></div></div><p></p><div><div><div><div>Mandatory Skills: Active Directory .<br>
<p></p>Experience: 8-10 Years .<br>
<p></p>The expected compensation for this role ranges from $80,000 to $158,000 .<br>
<p></p>Final compensation will depend on various factors, including your geographical location, minimum wage obligations, skills, and relevant experience. Based on the position, the role is also eligible for Wipro's standard benefits including a full range of medical and dental benefits options, disability insurance, paid time off (inclusive of sick leave), other paid and unpaid leave options.<br>
<p></p>Applicants are advised that employment in some roles may be conditioned on successful completion of a post-offer drug screening, subject to applicable state law.<br>
<p></p>Wipro provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state, or local laws. Applications from veterans and people with disabilities are explicitly welcome.<br>
<p></p>Reinvent your world. We are building a modern Wipro. We are an end-to-end digital transformation partner with the boldest ambitions. To realize them, we need people inspired by reinvention. Of yourself, your career, and your skills. We want to see the constant evolution of our business and our industry. It has always been in our DNA - as the world around us changes, so do we. Join a business powered by purpose and a place that empowers you to design your own reinvention.</div></div></div></div></div><p></p>

SECURITY ARCHITECT L1(CONTRACT)

<div><p><b>AI, Security Architect</b></p>
<p>
At BNY, our culture allows us to run our company better and enables employees&rsquo; growth and success. As a leading global financial services company at the heart of the global financial system, we influence nearly 20% of the world&rsquo;s investible assets. Every day, our teams harness cutting-edge AI and breakthrough technologies to collaborate with clients, driving transformative solutions that redefine industries and uplift communities worldwide.</p>
<p>
Recognized as a top destination for innovators, BNY is where bold ideas meet advanced technology and exceptional talent. Together, we power the future of finance &ndash; and this is what #LifeAtBNY is all about. Join us and be part of something extraordinary.</p>
<p>
We&rsquo;re seeking a future team member for the role of AI Security Architect to join our Cybersecurity team. This role can be in Pittsburgh, PA or Lake Mary, FL or NYC, NY.</p>
<p><b>Overview</b></p>
<p>
BNY is seeking a AI Security Architect to lead the design, implementation, and governance of security controls for AI/ML systems across the enterprise. This role will define the target architecture and security patterns for AI-enabled products and platforms, ensuring resilient, compliant, and trustworthy AI. The ideal candidate combines deep expertise in cybersecurity and cloud with hands-on knowledge of modern AI/ML infrastructure, data protection, adversarial threat models, and secure MLOps.</p>
<p><b>
Primary Responsibilities</b></p>
<ul>
<li>Define enterprise AI security architecture: develop reference architectures, guardrails, and standards for secure data pipelines, model training/inference, and AI-integrated applications across on-prem and cloud.</li>
<li>Secure MLOps/ML platforms: architect identity, secrets management, network segmentation, and least-privilege access for feature stores, model registries, orchestration, and deployment pipelines.</li>
<li>Data protection by design: establish controls for sensitive data ingestion, anonymization/pseudonymization, encryption (at rest/in transit), tokenization, and lineage across AI workflows.</li>
<li>Adversarial ML defense: design controls and tests for model poisoning, evasion, model theft/exfiltration, prompt injection, jailbreaking, data leakage, and output manipulation.</li>
<li>AI supply chain security: govern third-party models, APIs, and datasets; enforce SBOMs for AI components; evaluate provenance, licensing, and dependency risk.</li>
<li>Policy and governance integration: translate AI security requirements into actionable standards and control evidence; align with enterprise risk, compliance, and model governance processes.</li>
<li>Threat modeling and security testing: lead threat modeling for AI systems; design red-teaming and secure evaluation methods for models and agents; integrate chaos/resilience testing.</li>
<li>Secure development lifecycle: embed AI-specific security checks (static/dynamic scans, IaC policy-as-code, data quality gates, bias/robustness checks) into CI/CD and change management.</li>
<li>Runtime protection: implementing guardrails, content filters, output validation, rate limiting, anomaly detection, and monitoring for AI services and agentic workflows.</li>
<li>Observability and incident response: define logging/telemetry (model inputs/outputs, drift, performance, safety events); integrate AI-specific playbooks into SOC operations.</li>
<li>Zero Trust for AI: design identity-aware access, micro-segmentation, and continuous verification for data scientists, services, and agents.</li>
<li>Privacy and ethics controls: partner with privacy and legal to operationalize consent, minimization, purpose limitation, and responsible AI guardrails, including human-in-the-loop where appropriate.</li>
<li>Resilience and continuity: design disaster recovery, backup/restore, model reproducibility, and contingency plans for AI platforms and critical use cases.</li>
<li>Vendor/platform assessments: evaluate cloud AI services, open-source frameworks, and commercial tools for security posture, compliance, and fit-for-purpose.</li>
<li>Risk management: lead control testing and risk assessments for AI initiatives; document residual risks and remediation plans; support audits and regulatory queries.</li>
<li>Reference implementations: deliver secure patterns, sample code, and automation (e.g., reusable Terraform/Policy-as-Code, secrets patterns, logging schemas) to accelerate adoption.</li>
<li>Stakeholder leadership: partner with platform engineering, data science, enterprise architecture, cyber operations, and product teams to drive end-to-end secure outcomes.</li>
<li>Coaching and enablement: build education and guidance for architects, data scientists, and engineers on secure AI practices, design patterns, and common pitfalls.</li>
<li>Continuous improvement: track emerging threats, standards, and best practices; lead updates to architecture and controls; measure effectiveness via KPIs and control health.</li>
</ul>
<p><b>Required Qualifications</b></p>
<ul>
<li>12 years in cybersecurity/enterprise security architecture with 3 years focused on AI/ML or data platform security at scale.</li>
<li>Expertise in cloud security (AWS/Azure/GCP) including identity, secrets management, key management (KMS/HSM), network segmentation, and policy-as-code.</li>
<li>Strong knowledge of AI/ML workflows: data ingestion/feature engineering, model training/inference, MLOps tooling (model registry, orchestrators, serving).</li>
<li>Practical experience with adversarial ML concepts and defenses; familiarity with model robustness, prompt injection risks, and secure evaluation methods.</li>
<li>Proficiency in designing observability/telemetry for AI systems (e.g., logging prompts/outputs, drift/quality metrics, safety events) with SIEM/SOAR integration.</li>
<li>Hands-on with infrastructure-as-code (Terraform/CloudFormation), CI/CD, and secure SDLC practices tailored to data/ML systems.</li>
<li>Deep understanding of data protection (encryption, tokenization, anonymization), privacy by design, and secure data lifecycle management.</li>
<li>Strong stakeholder management and communication skills; ability to convert complex risks into clear architecture decisions and implementation guidance.</li>
</ul>
<p><b>Preferred Qualifications</b></p>
<ul>
<li>Experience architecting secure AI agents and LLM applications including guardrails, content filters, and output validation.</li>
<li>Familiarity with standards and frameworks relevant to AI and data (e.g., NIST AI RMF, cloud CIS benchmarks, OWASP for ML/LLM, privacy controls).</li>
<li>Background in model governance and risk management (e.g., testing for drift, bias, stability, and explainability) and integration with enterprise control frameworks.</li>
<li>Programming/scripting proficiency (Python preferred) for reference implementations, automation, and security tooling integrations.</li>
<li>Experience with container security, Kubernetes, service mesh, and microservices patterns in AI platforms.</li>
<li>Prior leadership in enterprise-scale transformations, enabling secure adoption of AI across multiple business lines.</li>
</ul>
<p>At BNY, our culture speaks for itself, check out the latest BNY news at:</p>
<p>
BNY Newsroom</p>
<p>
BNY LinkedIn</p>
<p> Here&rsquo;s a few of our recent awards:</p>
<ul>
<li>America&rsquo;s Most Innovative Companies, Fortune, 2025</li>
<li>World&rsquo;s Most Admired Companies, Fortune 2025</li>
<li>&ldquo;Most Just Companies&rdquo;, Just Capital and CNBC, 2025</li></ul><br>
<p><br>
Our Benefits and Rewards:</p>
<p>
BNY offers highly competitive compensation, benefits, and wellbeing programs rooted in a strong culture of excellence and our pay-for-performance philosophy. We provide access to flexible global resources and tools for your life&rsquo;s journey. Focus on your health, foster your personal resilience, and reach your financial goals as a valued member of our team, along with generous paid leaves, including paid volunteer time, that can support you and your family through moments that matter.</p><p><br>
BNY assesses market data to ensure a competitive compensation package for our employees. The base salary for this position is expected to be between $142,000 and $259,000 per year at the commencement of employment. However, base salary if hired will be determined on an individualized basis, including as to experience and market location, and is only part of the BNY total compensation package, which, depending on the position, may also include commission earnings, discretionary bonuses, short and long-term incentive packages, and Company-sponsored benefit programs.<br>
This position is at-will and the Company reserves the right to modify base salary (as well as any other discretionary payment or compensation) at any time, including for reasons related to individual performance, change in geographic location, Company or individual department/team performance, and market factors.</p></div>

AI Security Architect

<p>Cyber Sec Arch\Engr ll &ndash; ICS\OT Overview This position is responsible for providing onsite and offsite cyber security services associated with industrial Process Control Networks for Company customers in the Oil and Gas; Hydrocarbon Processing; Power Generation; Pulp, Paper &amp; Printing; Continuous Web Solutions; Petrochemicals; Life Sciences; and Metals, Minerals and Mining markets. Services provided include on-site and offsite consulting, troubleshooting, network designs, implementation, assessments, and other related tasks as identified. Responsibilities of the Position</p><p>&bull;Act as primary customer interface to ensure proposed solutions meet their business needs.&bull;Maintain technical competency with the Company Process Solutions security and networking product/systems portfolio, while maintaining expert knowledge on specific designatedsecurity/network disciplines.&bull;Develop sound and trusted relationships with internal and external customers by providing accurate and efficient technical/engineering support.&bull;Respond to customer inquiries, questions, and issues by diagnosing problems and providing the most appropriate technical solution in an accurate and timely manner.&bull;Maintain knowledge of current industry security standards such as NIST, NCA, IEC-62443, ISO27001, etc.&bull;Maintain cyber security certifications.&bull;Requires 30&ndash; 65% travel</p><p>Qualifications &amp; Experience:</p><p>&bull;</p><p>Bachelor&rsquo;s degree in a computer related field such as Computer Science, Computer informationsystems degree with a minimum of 3 years&rsquo; experience in industrial automation network systems.</p><p><b>Must have:</b></p><p>&bull;Networking certs (CCNA).</p><p>&bull;3+ years Industrial Networking.</p><p>&bull;Linux/Windows Security Basics.</p><p>&bull;Virtualization Experience (VCP).</p><p>&bull;Familiarity within Industrial Process Control.</p><p>&bull;Familiarity with Industrial Site&rsquo;s Safety Requirements.</p><p>&bull;Microsoft &ndash; Active Directory, DNS, WSUS, Terminal Server.</p><p>&bull;Familiarity in LAN/WAN architectures &amp; Purdue ICS model.</p><p>&bull;Process Control System Design/Implementation Knowledge.</p><p>&bull;Familiarity designing and optimizing complex LAN environments.</p><p>&bull;Cisco Certified Network/Design/Security Professional (at least one).</p><p>&bull;Experience with anti-virus systems, backup &amp; restore, Network management &amp; Whitelisting.</p><p><b>Nice to have:</b></p><p>&bull;CompTIA Security +.</p><p>&bull;Cyber Security Risk Analysis.</p><p>&bull;Certified Ethical Hacker (CEH).</p><p>&bull;Splunk Fundamentals &amp; Administration.</p><p>&bull;3+ years Performing Audits/Assessments.</p><p>&bull;Microsoft Certified Systems Engineer (MCSE).</p><p>&bull;Experience on SIEM solution such as (Splunk, ArcSight, Tripwire).</p><p>&bull;Global Industrial Cyber Security Professional (GICSP) certification.</p><p>&bull;Experience different firewall vendors (Cisco, Juniper, Palo alto, Fortinet).</p><p>&bull;Experience performing cybersecurity/network/system services at customer sites.</p><p>&bull;CISSP Certified Information Systems Security Professional or similar security certification.</p><p>&bull;Experience with current industry security standards (NIST, NCA, IEC-62443, ISO27001, etc).</p><p>&bull;Excellent troubleshooting skills to resolve complex network/application/system integration issues.</p><p><b>Competencies:</b></p><p>&bull;Result-oriented.</p><p>&bull;Effective communicator.</p><p>&bull;Influences without authority.</p><p>&bull;Customer service oriented.</p><p>&bull;Open-minded- Integrative thinker.</p><p>&bull;Confident &ndash; ability to work with minimal supervision.</p><p>Job Types: Full-time, Contract<br/>Contract length: 12 months</p><p>Pay: ﷼7,000.00 - ﷼12,000.00 per month</p><p>Work Location: In person</p>

Cyber Sec ArchEngr ll – ICSOT

Search 10000+ Cyber security architect jobs near you this April. New roles added regularly across leading industries. Apply today.