security architect

Funavry Technologies

<div>
 
 
 The Role:
 
 We are seeking an experienced
 
 Security Architect with a strong DevSecOps mindset
 
 to lead security architecture, automation, and operational security
 
 for a blockchain-powered AI and Agentic infrastructure platform.
 
 
 
 This role goes beyond traditional security architecture and focuses
 
 on embedding security into the entire software development lifecycle
 
 , including
 
 CI/CD pipelines, AI model deployment, agentic AI systems, blockchain infrastructure, and cloud-native workloads.
 
 
 
 The Security Architect will design and implement
 
 secure-by-design development processes
 
 , protect
 
 AI agents and blockchain infrastructure
 
 , and ensure the platform achieves enterprise-grade security, resilience, and compliance.
 
 
 
 
 
 
 Responsibilities:
 
 
 
 
 DevSecOps &amp; Secure Development
 
 
 <ul>
 <li>
 Design and implement DevSecOps frameworks integrating security controls directly into CI/CD pipelines.
 </li>
 <li>
 Implement automated security testing, including SAST, DAST, dependency scanning, and infrastructure scanning.
 </li>
 <li>
 Secure the software supply chain, including artifact signing, SBOM generation, container scanning, and integrity validation.
 </li>
 <li>
 Establish secure coding standards and practices across engineering teams.
 </li>
 <li>
 
 Blockchain Infrastructure Security
 
 </li>
 <li>
 Architect security for blockchain nodes, validators, and distributed network infrastructure.
 </li>
 <li>
 Implement secure key management systems, including HSM-based signing and validator protection.
 </li>
 <li>
 Design controls to protect consensus mechanisms, node infrastructure, and smart contract interaction layers.
 </li>
 <li>
 Lead smart contract and protocol-level security reviews in collaboration with blockchain engineers.
 </li>
 </ul>
 
 
 
 
 
 Agentic AI &amp; AI Workload Security
 
 
 <ul>
 <li>
 Design security controls for AI agents, autonomous workflows, and multi-agent systems.
 </li>
 <li>
 Protect against prompt injection, model manipulation, agent privilege escalation, and tool misuse.
 </li>
 <li>
 Implement safeguards for model integrity, inference security, and AI system trust boundaries.
 </li>
 <li>
 Define secure architecture for AI pipelines, training environments, and model deployment infrastructure.
 </li>
 </ul>
 
 
 
 
 
 Cloud &amp; Kubernetes Security
 
 
 <ul>
 <li>
 Design and implement cloud-native security architecture across AWS infrastructure.
 </li>
 <li>
 Secure Kubernetes clusters, including workload isolation, pod security policies, runtime protection, and network segmentation.
 </li>
 <li>
 Implement zero-trust architecture, identity-based access controls, and secrets management.
 </li>
 <li>
 Enforce least-privilege IAM policies across cloud and internal systems.
 </li>
 </ul>
 
 
 
 
 
 Monitoring, Threat Detection &amp; Incident Response
 
 
 <ul>
 <li>
 Implement security monitoring frameworks for blockchain, AI, and cloud infrastructure.
 </li>
 <li>
 Build dashboards and alerting systems using Prometheus, Grafana, and security monitoring tools.
 </li>
 <li>
 Develop and maintain incident response playbooks for blockchain attacks, AI misuse, and infrastructure breaches.
 </li>
 <li>
 Conduct regular threat modeling, penetration testing, and security assessments.
 </li>
 </ul>
 
 
 
 
 
 Cross-Team Security Leadership
 
 
 <ul>
 <li>
 Work closely with AI engineers, blockchain architects, DevOps teams, and product leadership to embed security throughout the platform lifecycle.
 </li>
 <li>
 Provide guidance on security architecture for new product features and AI capabilities.
 </li>
 </ul>
 
 
 
 
 
 Basic Qualifications:
 
 We are seeking a senior security professional with strong DevSecOps experience and expertise in securing modern distributed systems.
 
 
 
 
 
 
 Required experience:
 
 
 <ul>
 <li>
 8+ years of experience in cybersecurity
 </li>
 <li>
 3+ years in security architecture or DevSecOps leadership roles
 </li>
 </ul>
 
 
 
 
 
 Technical expertise:
 
 
 <ul>
 <li>
 Strong experience implementing DevSecOps practices and secure CI/CD pipelines
 </li>
 <li>
 Deep knowledge of cloud security (AWS preferred) including IAM, audit logging, and infrastructure security
 </li>
 <li>
 Experience securing blockchain infrastructure, including validator nodes, key management, and decentralized architectures
 </li>
 <li>
 Understanding of cryptography, PKI, distributed trust models, and blockchain security principles
 </li>
 <li>
 Expertise in Kubernetes and container security
 </li>
 <li>
 Experience with software supply chain security and artifact integrity
 </li>
 <li>
 Familiarity with AI/ML system security, including model integrity and inference environments
 </li>
 <li>
 Understanding of AI/LLM security risks, including prompt injection and agent misuse
 </li>
 <li>
 Proficiency in automation and scripting using Python, Go, or Rust
 </li>
 </ul>
 
 
 
 
 
 Educational Qualifications
 
 
 <ul>
 <li>
 Bachelor&rsquo;s or Master&rsquo;s degree in Computer Science, Cybersecurity, or Information Security.
 </li>
 <li>
 Certifications such as CISSP, CISM, CKA/CKS, AWS Security Specialty, DevSecOPs certifications are a strong plus.
 </li>
 </ul>
 
 
 
 
 
 Important Note:
 
 Clearly indicate the job title
 
 &ldquo;Security Architect&rdquo;
 
 in your job application. Our hiring process is extremely competitive, and we will only respond to shortlisted candidates. We offer industry-leading compensation and a world-class work environment.
 
</div>

Security Architect

Systems Technology Group, Inc. (STG)

<div>
 
 
 Title:
 
 
 Cyber Security Architect
 
 
 
 
 
 
 
 Description:
 
 STG is a fast-growing Digital Transformation services company providing Fortune 500 companies with Digital Transformation, Mobility, Analytics and Cloud Integration services in both information technology and engineering product lines. STG has a 98% repeat business rate from existing clients and have achieved industry awards and recognition for our services.
 
 
 
 
 
 
 Experience Required:
 
 
 
 &bull; Minimum 10 years of experience in cybersecurity architecture and engineering.
 
 
 &bull;
 
 Strong background in threat modeling and application security tools, such as:
 
 
 
 o Microsoft Threat Modeling Tool
 
 
 o ThreatModeler
 
 
 o IriusRisk
 
 
 o securiCAD
 
 
 &bull; Proven experience designing and implementing countermeasures for application risks.
 
 
 &bull; Demonstrated experience collaborating with development teams during architecture, design, implementation, testing, and UAT phases.
 
 
 &bull; Experience identifying, analyzing, and managing risk in complex enterprise environments.
 
 
 &bull;
 
 Hands-on experience with security tools including:
 
 
 
 o RedSeal
 
 
 o Fortify
 
 
 o Burp Suite
 
 
 o Qualys
 
 
 o Wiz
 
 
 o CrowdStrike
 
 
 o Defect Dojo
 
 
 
 
 
 
 Skills Description:
 
 
 <ul>
 <li>
 Deep knowledge of architectural blueprints for data center and cloud environments, with emphasis on Azure (IaaS, PaaS, SaaS).
 </li>
 <li>
 Strong ability to detect vulnerabilities through code review, application testing, and infrastructure assessments.
 </li>
 <li>
 High proficiency deploying and configuring applications in large-scale enterprise environments.
 </li>
 <li>
 
 Working knowledge of:
 
 </li>
 <li>
 NIST frameworks
 </li>
 <li>
 OWASP Top 10
 </li>
 <li>
 Enterprise grade security design patterns
 </li>
 </ul>
 
 
 
 
 Bachelor&rsquo;s or Master&rsquo;s in Computer Science, Information Security, Cybersecurity,Engineering, or related discipline (Required).
 
 
 &bull;
 
 CISSP &ndash; Required
 
 
 
 &bull; CCSP &ndash; Recommended
 
 
 &bull; Azure Certifi cations:
 
 
 o
 
 AZ 104 (Required)
 
 
 
 o AZ 500, AZ 700, AZ 140 (Recommended)
 
 
 
 
 
 
 
 
 
 Cyber Security Architect
 
 position is based at Fort Worth, TX. A great opportunity to experience the corporate environment leading personal career growth.
 
 <ul>
 <li>
 
 Resume Submittal Instructions:
 
 Interested/qualified candidates should email their word formatted resumes to Ms. Shweta Huria at
 
 Shweta.huria@stgit.com
 
 and/or contact at 248.220.6725. In the subject line of the email please include: First and Last Name
 
 (Cyber Security Architect
 
 )
 </li>
 <li>
 For more information about STG, please visit us at www.stgit.com.
 </li>
 </ul>
 
 
</div>

Cyber Security Architect

COZMALABS

We are seeking a highly skilled and motivated Cyber Security Architect with strong system, on prem and Cloud Security expertise to oversee and enhance the organization&rsquo;s internal security architecture, controls, and policies while actively contributing to external security initiatives and projects.This role combines strategic architecture leadership, hands-on implementation, security research, operations oversight, and cloud security engineering, with a strong focus on Microsoft environments such as Microsoft 365, Microsoft azure , and OS security.The ideal candidate will possess deep expertise in enterprise security architecture, domain security, on-prem and hybrid infrastructure protection, cloud-native security controls, and DevSecOps integration.Experience Requirements<ul><li>Minimum 7+ years in system and Cloud Security role.</li><li>Proven experience in enterprise security architecture (on-prem + cloud)</li><li>Experience in security research, security operations, and security assurance</li><li>Experience in setting and documenting security processes and procedures in compliance with Qatar NCSA guidelines and security best practices.</li><li>Experience in operating system and infrastructure hardening.</li></ul>Key Responsibilities<ul><li>Design, implement, and maintain enterprise-wide security architecture for the company internal security, user devices, cloud, and hybrid environments.</li><li>Develop and enforce security policies, standards, and procedures.</li><li>Lead security risk assessments and define mitigation strategies.</li><li>Align security controls with business objectives and regulatory requirements.</li><li>Oversee internal security governance and compliance frameworks (ISO 27001, NIST, CIS).</li><li>Architect and secure Azure cloud environments (IaaS, PaaS, SaaS).</li><li>Implement cloud-native and third-party security controls.</li><li>Conduct detailed security assessments of cloud services to ensure compliance with internal policies and industry frameworks.</li><li>Identify and remediate misconfigurations using automated scanning and manual inspection.</li><li>Implement secure cloud architecture patterns and service integrations.</li><li>Contribute to threat modeling and cloud risk assessments.</li><li>Ensure secure hybrid integration between on-prem and Azure environments.</li><li>Secure Active Directory and domain environments.</li><li>Implement GPO hardening and identity security controls.</li><li>Manage IAM, RBAC, MFA, and privileged access strategies.</li><li>Harden Windows/Linux servers and enterprise endpoints.</li><li>Oversee firewall configurations, IDS/IPS, VPN security, and segmentation.</li><li>Implement encryption and data protection strategies.</li><li>Perform vulnerability assessments and coordinate penetration testing.</li><li>Develop scripts and automation tools (PowerShell, Python, Bash) to enhance monitoring and compliance validation.</li><li>Integrate security controls within CI/CD pipelines (DevSecOps practices).</li><li>Monitor emerging threats, tools, and vulnerabilities.</li><li>Evaluate security technologies and recommend improvements.</li><li>Contribute to threat modeling exercises.</li><li>Participate in external security architecture and implementation projects.</li><li>Provide technical advisory for client-facing security initiatives.</li><li>Review third-party security integrations and solutions.</li><li>Support pre-sales security design when required.</li><li>Conduct risk assessments and compliance audits.</li><li>Ensure adherence to CIS Benchmarks, NIST, ISO 27001.</li><li>Develop remediation guidance and contribute to policy development.</li><li>Participate in external security architecture and implementation projects.</li><li>Provide technical advisory for client-facing security initiatives.</li><li>Review third-party security integrations and solutions.</li><li>Support pre-sales security design when required.</li></ul>Required Technical Expertise<ul><li>Deep technical understanding and hands on of:</li></ul>Cloud &amp; Security Platforms<ul><li>Cloud security.</li><li>Data protection strategies</li><li>Zero Trust Architecture</li></ul>Infrastructure &amp; Systems Security<ul><li>Active Directory and Microsoft 365 hardening</li><li>User devices security</li><li>Domain security best practices</li><li>Endpoint security solutions</li><li>Hybrid identity solutions</li></ul>DevSecOps &amp; Automation<ul><li>CI/CD security integration</li><li>Secure coding awareness</li><li>Security automation scripting</li></ul>Certifications (Required / Strongly Preferred)<ul><li>CISSP &ndash; Certified Information Systems Security Professional</li><li>CCSP &ndash; Certified Cloud Security Professional</li><li>CISM &ndash; Certified Information Security Manager</li><li>Microsoft Azure Security Engineer Associate (AZ-500)</li><li>CompTIA Security+ (Foundational)</li></ul>EducationBachelor&rsquo;s degree in Cyber Security, Computer Science, Information Systems, or related field (Master&rsquo;s preferred).Job Type: Full-time

Aptiv

<li>ABOUT WIND RIVER
Wind River is a global leader in delivering software for mission-critical intelligent systems. For more than four decades, the company has been an innovator and pioneer, powering billions of systems that require the highest levels of security, safety, and reliability.
Wind River helps customers across automotive, aerospace, defense, industrial, medical, and telecommunications industries solve complex technology challenges on their journey toward the new intelligent machine economy. The company&rsquo;s software powers generation after generation of the safest, most secure systems in the world. Examples include playing a key role in NASA space missions such as Artemis I, the James Webb Space Telescope, and multiple Mars rovers. We&rsquo;ve achieved recent 5G milestones including the world&rsquo;s first successful 5G data session with Verizon and building one of the largest Open RAN networks in the world with Vodafone.
The company has received industry recognition for its technology innovation and leadership, and for its workplace culture, including global Great Place to Work certification and being named a &ldquo;Top Workplace&rdquo; for ten consecutive years. If you want to be part of a unique culture where the lived experience is based on our cultural attributes of growth mindset, customer-focus, and diversity, equity, inclusion &amp; belonging, come join us and help advance the future software defined world.
ABOUT THE OPPORTUNITY
YOUR ROLE
Wind River Systems is seeking an experienced Software Product Security Architect to join the R&amp;D Security Office to scale trust in our product security to meet increasing business and security technology needs. This position will join a mature product security team and architect and mobilize product security trust initiatives, manage customer product security trust, and contribute to product security incident response (PSIRT) and vulnerability management.
HOW YOU WILL CONTRIBUTE
In your daily job you will:
<ul><li>Work and collaborate with customer, product, engineering, and operations teams to ensure high levels of product security trust with a scalable, compliance-driven mindset, across all products
</li><li>Architect the product security trust roadmap and scale the compliance framework to meet emerging and future business priorities.
</li><li>Empower product security compliance frameworks across engineering and aligned to the CTO Office, Product Management, IT, Legal, InfoSec, and SecOps.
</li><li>Empower product security champions throughout product engineering.
</li><li>Manage customer product security trust and compliance.
</li><li>Training, mentoring, and supporting development teams to follow secure development values, principles, and practices.
</li></ul>Key skills and competencies for succeeding in this role are:
<ul><li>Direct experience with product security assurance techniques including Threat Modeling, Security Testing, Vulnerability Management, Software Composition, etc.
</li><li>Experience in software engineering models and techniques.
</li><li>Experience empowering security compliance broadly across an organization.
</li><li>Broad-based experience with global security regulations, frameworks, and standards.
</li><li>Exposure to customer compliance and remediations (Questionnaire&rsquo;s, Audits, Contracts, etc.)
</li><li>Ability to analyze and think quickly and to resolve conflict.
</li><li>Strong communication, interpersonal, and mentoring skills.
</li><li>Ability to work effectively across the organization.
</li><li>Ability to adapt to a changing environment.
</li></ul>QUALIFICATIONS:
<ul><li>Bachelor's degree in engineering, computer science, information technology or similar field with 14 years of experience in software development, security engineering, and/or compliance. Master&rsquo;s Degree is preferred and 12 years of related experience.
</li><li>Preferred is a certified security professional (CSSLP, CISM, CISSP, CEH, or similar).
</li><li>Direct experience mobilizing one or more security standards/certifications/models like OWASP SAMM, IEC 62443, ISO 21434, NIST 800-218, FIPS 140-3, DISA STIG, Common Criteria, CMMC, FedRamp, etc.
</li><li>Practical experience with the NIST 800 series of security standards, including 800-53, 800-171, and others.
</li><li>Experience mobilizing secure software development techniques across an organization such as training, workshops, or similar.
</li><li>Demonstrated experience using agile techniques and frameworks to deliver secure software.
</li><li>Excellent verbal and written, management level and customer communication skills.
</li><li>Preferred experience with the European Union (EU) security regulatory environment including the Cyber Resilience Act (CRA).
</li><li>Preferred experience with national security systems and standards (CNSS, etc.).
</li><li>Preferred working knowledge of risk management frameworks and risk-based secure software development.
</li><li>Preferred experience with AI and Machine learning and their governance and provenance in a secure software development environment.
</li><li>Preferred working knowledge of related quality and safety assurance standards such as ASPICE, ISO 26262, or DO-178C.
</li></ul>BENEFITS
<ul><li>Hybrid work model for workplace flexibility
</li><li>Comprehensive health, dental, and life insurance
</li><li>Short and long-term disability coverage
</li><li>RRSP matching for financial security
</li><li>Flexible time-off policies for work-life balance
</li><li>Employee assistance program for mental well-being
</li><li>Learning benefits, including a LinkedIn Learning subscription and seminars
</li></ul>COMPENSATION
The annual base salary range for this role&rsquo;s listed grade level is currently $146,000 to 210,00 plus bonus, or $180,000 to $230,200 plus a bonus for MA, NYC, CO, WA and CA residents. Salary ranges are determined through interviews and a review of the education, experience, knowledge, skills, location, and abilities of the applicant, and equity with other team members.
SPECIAL CLEARANCE REQUIREMENTS
This position will perform work that the U.S. government has specified can only be performed by a U.S. citizen on U.S. soil, and therefore any offer will be contingent upon verification of both of these requirements.
Join us at Wind River, where we're not just shaping technology; we're shaping the future of a safer, more connected world. Your journey to make a meaningful impact begins here.
Wind River is an Equal Opportunity Employer with a commitment to diversity. We prohibit discrimination based on race, color, religion, gender, national origin, age, disability, veteran status, marital status, pregnancy, gender expression or identity, sexual orientation or any other legally protected status.
#LI-JP1
Privacy Notice - Active Candidates: https://www.aptiv.com/privacy-notice-active-candidates
Aptiv is an equal employment opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, national origin, sex, gender identity, sexual orientation, disability status, protected veteran status or any other characteristic protected by law.</li>

Product Security Architect

Openkyber

<div>Job Title: Application Security Architect &amp; Engineer Location: Richmond, VA Complete Description ABOUT THE ROLE
Application Security Engineer (ASE) with 5+ years of experience to join the Office of Technology under Joint Security Operations. In this role, the ASE serves as a dedicated security partner to application teams, providing guidance on secure design, vulnerability management, and secure development practices. The ASE works collaboratively across the SDLC to ensure security is embedded into application design, development, testing, and deployment. This includes supporting compliance requirements, delivering training and education, and assisting teams with vulnerability remediation efforts.
<ul><li>The successful candidate will identify and recommend improvements to improve the security of all Virginia Tax applications, promote secure coding and development practices, and contribute to ongoing initiatives that reduce risk and strengthen the agency s overall security posture.</li></ul>
Responsibilities include but not limited to:
<ul><li>Provide security guidance, training, and best practices for development and operations teams.</li>
<li>Support secure software development by applying knowledge of SDLC, Agile, and Scrum methodologies.</li>
<li>Evaluate software architecture and design for security risks and alignment with DevSecOps principles.</li>
<li>Promote and enforce secure coding standards and guidelines.</li>
<li>Review source code to identify vulnerabilities and recommend remediation strategies.</li>
<li>Assess security risks across multiple programming languages (e.g., JavaScript, C#, Java, Ruby, SQL).</li>
<li>Analyze and secure modern web application architectures, including cloud, APIs, microservices, and client-server models.</li>
<li>Identify and address common vulnerabilities, including those outlined in the OWASP Top 10.</li>
<li>Support vulnerability remediation, patch management, and continuous improvement efforts.</li>
<li>Utilize application security testing tools such as SAST, DAST, IAST, and platforms like Accunetix, Veracode, Jenkins, Splunk, Rapid7, and Tenable.</li>
<li>Interpret and act on findings from SIEM systems, including Splunk.</li>
<li>Apply knowledge of common security controls and frameworks.</li>
<li>Ensure compliance with relevant security regulations and standards (e.g., NIST 80053, IRS Pub 1075, PCIDSS).</li>
<li>Implement and evaluate AWS cloud security controls and best practices.</li>
<li>Create, maintain, and review System Security Plans (SSPs).</li>
<li>Troubleshoot and resolve complex technical and security-related issues.</li>
<li>Stay current with evolving threats, technologies, and industry trends.</li>
<li>Develop detailed plans and communicate risks, impacts, and recommendations effectively.</li>
<li>Collaborate with application teams, QA engineers, and operations teams to integrate security into workflows.</li>
<li>Provide constructive, actionable feedback to application teams.</li>
<li>Communicate technical concepts clearly to both technical and nontechnical audiences.</li>
<li>Work closely with other security analysts and technology teams to support agency and enterprise security initiatives.</li>
<li>Manage multiple tasks, prioritize effectively, and meet deadlines.</li>
<li>Apply critical thinking to evaluate and mitigate security risks and vulnerabilities.</li>
</ul><ul><li>Required Skills/Experience:</li></ul>
<ul><li>Five or more years experience in application security.</li>
<li>Two or more years network or firewall/AWS Security Groups.</li>
<li>Experience with log collection, vulnerability scans and remediation, or privileged access management.</li>
<li>Strong understanding of security concepts, network protocols, and threat vectors.</li>
<li>Proficiency in SIEM, IDS/IPS, EDR, and other relevant security tools.</li>
<li>Excellent analytical and problem-solving skills.</li>
<li>Strong communication, collaboration, and documentation skills.</li>
<li>Ability to work independently and as part of a team in a fast-paced environment.</li>
</ul>Have experience and a strong knowledge of the following:
<ul><li>Splunk, InsightVM Rapid7, Tenable, CyberArk, Jenkins, Veracode</li>
<li>Linux and Windows Operating Systems, Baseline hardening of operating systems</li>
<li>IIS and Apache, Scripting Languages and SQL, PowerShell, Firewall</li>
</ul>At least one of these certs below is REQUIRED:
<ul><li>CompTIA Security+</li>
<li>ISC2 CC (Certified in Cybersecurity)</li>
<li>Offensive Security Certified Professional (OSCP)</li>
<li>CCSP (Certified Cloud Security Professional)</li>
<li>CSSLP (Certified Secure Software Lifecycle Professional)</li>
</ul>At least one of these certs below is highly DESIRED (Independently and or with one of the above):
<ul><li>AWS Solutions Architect (Associate/Professional)</li>
<li>AWS Security Specialty</li>
</ul>At least one of the any is DESIRED:
<ul><li>CompTIA PenTest+</li>
<li>Certified Ethical Hacker (CEH)</li>
<li>GIAC Certified Intrusion Analyst (GCIA)</li>
</ul>Required/Desired Skills
<ul><li>Application Security - Required 5.0 Years</li>
<li>Network or Firewall/AWS security Groups - Required 2.0 Years</li>
<li>Infrastructure as Code (IaC): Advanced proficiency in Terraform for multi-account landing zones and automated provisioning. Required 2.0 Years</li>
<li>Experience with log collection, vulnerability scans and remediation, or privileged access management - Required 4.0 Years</li>
<li>Proficiency in SIEM, IDS/IPS, EDR, and other relevant security tools - Required 4.0 Years</li>
<li>Networking &amp; Hybrid Connectivity: Solid understanding of routing, firewalls, AWS Direct Connect, and VPNs in a hybrid cloud environment - Required 4.0 Years</li>
<li>One REQUIRED: CompTIA Security+, ISC2 CC (Certified in Cybersecurity), Offensive Security Certified Professional (OSCP), CCSP, or CCLP. UPLOAD COPY!! - Required</li>
<li>CI/CD &amp; DevOps: Experience with GitLab CI/CD, Jenkins, or AWS CodePipeline for automated, secure deployments - Highly desired 5.0 Years</li>
<li>Splunk, InsightVM Rapid7, Tenable, CyberArk, Jenkins, Veracode - Highly desired 2.0 Years</li>
<li>Linux and Windows Operating Systems, Baseline hardening of operating systems - Highly desired 2.0 Years</li>
<li>IIS and Apache, Scripting Languages and SQL, PowerShell, Firewall - Highly desired 2.0 Years</li>
<li>One highly DESIRED (Independently and or with one of the above): AWS Solutions Architect (Associate/Professional) or AWS Security Specialty - Highly desired</li>
<li>One of these is DESIRED: CompTIA PenTest+, Certified Ethical Hacker (CEH), or GIAC Certified Intrusion Analyst (GCIA) - Highly desired</li>
</ul>For applications and inquiries, contact: hirings@openkyber.com</div>

Identity Security Architect

ServiceTitan

<div><h2 class="jobSectionHeader">Ready to be a Titan?</h2><h2 class="jobSectionHeader">
We are looking for a visionary Principal Security Architect to serve as the master designer of our digital defense spanning disciplines of Product Security, Corporate Security, and Risk Management. You will balance cutting-edge innovation with uncompromising protection, ensuring our infrastructure is resilient by design rather than by reaction. You will lead security architecture efforts for flagship customer-facing initiatives and partner closely with technical and business leaders to make a lasting impact. By integrating with delivery teams as a Subject Matter Expert, you will provide detailed consultation to ensure software solutions are secure, scalable, and adhere to industry-leading security standards.</h2><h2 class="jobSectionHeader">
What You&rsquo;ll Do:</h2><ul><li><h2 class="jobSectionHeader">
Architect and Enforce Secure Cloud Native Guardrails</h2></li></ul><ul><li><h2 class="jobSectionHeader">
Security as Code and Platform Guardrails: Design and implement enforceable security controls directly into Infrastructure as Code, CI CD pipelines, and cloud control planes. Define reusable, opinionated reference patterns that bake in least privilege IAM, secure defaults, encryption standards, workload identity, network segmentation, and tenant isolation across AWS, Azure, or GCP. Ensure guardrails are preventative by default rather than detective after deployment.</h2></li><li><h2 class="jobSectionHeader">
Secure SaaS Architecture and Isolation: Own and evolve security reference architectures for multi tenant customer facing platforms, including API security, strong service to service authentication, authorization boundaries, secrets management, and blast radius containment. Embed data level protections and isolation controls that scale with product growth.</h2></li><li><h2 class="jobSectionHeader">
Automated Architecture Assurance: Institutionalize automated architecture reviews through policy as code, static analysis, and runtime controls that continuously validate alignment with Zero Trust principles, regulatory requirements, and internal security standards. Replace manual review bottlenecks with scalable, measurable security enforcement.</h2></li></ul><ul><li><h2 class="jobSectionHeader">
Design and Modernize Corporate Security Controls</h2></li></ul><ul><li><h2 class="jobSectionHeader">
Workforce Identity and Just in Time Access: Design and implement modern workforce identity architecture grounded in Zero Trust principles. Develop and mature just in time and just enough access strategies across SaaS applications, cloud administration, and internal systems. Reduce standing privilege through automated provisioning, strong authentication, device trust, and continuous access evaluation.</h2></li><li><h2 class="jobSectionHeader">
Endpoint and Device Security Strategy: Evaluate, test, and recommend endpoint detection, response, and hardening controls across macOS, Windows, and mobile platforms. Define secure configuration baselines, telemetry standards, and device posture requirements that meaningfully reduce lateral movement and credential theft risk. Continuously assess control efficacy through validation testing and measurable risk reduction.</h2></li><li><h2 class="jobSectionHeader">
Security Orchestration and Automation: Identify and implement automation opportunities across identity, endpoint, and security operations workflows. Architect integrations between IAM, EDR, MDM, SIEM, and ticketing platforms to eliminate manual processes, accelerate containment, and improve signal to noise. Drive security as code and event driven enforcement across corporate systems.</h2></li><li><h2 class="jobSectionHeader">
Control Assurance and Continuous Improvement: Establish mechanisms to test and validate corporate security controls through simulation, access reviews, configuration audits, and adversary emulation. Translate findings into architectural improvements that harden the enterprise environment while maintaining workforce productivity.</h2></li></ul><ul><li><h2 class="jobSectionHeader">
Strategic Advisory and Governance</h2></li></ul><ul><li><h2 class="jobSectionHeader">
Executive Consultancy: Act as the primary security consultant for executive leadership, translating complex cyber threats, regulatory requirements, and risk posture into actionable architectural guidance.</h2></li><li><h2 class="jobSectionHeader">
Risk-Based Trade-offs: Lead risk-based trade-off discussions regarding security, privacy, usability, and delivery, documenting key decisions and rationale to help teams move quickly and consistently. Actively engage in governance processes to ensure compliance with regulations such as PCI DSS, CCPA, SOC2, ISO 27001, ISO 27701, and ISO 42001.</h2></li></ul><ul><li><h2 class="jobSectionHeader">
Secure and Advance AI Across the Enterprise</h2></li></ul><ul><li><h2 class="jobSectionHeader">
Product AI Security: Design and review secure architectures for AI enabled product capabilities, including LLM workflows, RAG pipelines, agentic systems, and Model Context Protocol integrations. Define rigorous guardrails for tenant isolation, data ingestion, tool permissions, sensitive data handling, prompt safety, authorization boundaries, output controls, and auditability.</h2></li><li><h2 class="jobSectionHeader">
Corporate AI Governance: Partner with IT, Legal, Data, and Engineering leaders to implement controls for internal AI usage and third party AI services. Establish lifecycle governance for model selection, validation, monitoring, and retirement aligned with emerging standards and regulation. Prevent sensitive data leakage, manage vendor risk, and enforce privacy, compliance, and intellectual property protections.</h2></li><li><h2 class="jobSectionHeader">
AI Driven Security and Emerging Technology: Leverage AI to enhance detection, response, and secure development workflows while mitigating risks such as prompt injection, model abuse, adversarial manipulation, and model poisoning. Evaluate and guide adoption of emerging technologies to ensure long term resilience against sophisticated threat actors.</h2></li></ul><h2 class="jobSectionHeader">
What You&rsquo;ll Bring:</h2><ul><li><h2 class="jobSectionHeader">
Experience: 12+ years of experience in senior technical roles with 5+ years focused on Security Architecture. Demonstrated leadership at the enterprise or divisional level, and a strong background in software engineering, product security, and/or enterprise architecture.</h2></li><li><h2 class="jobSectionHeader">
Architectural Mastery: Deep experience with security frameworks (NIST, ISO 27001, SOC2) and comprehensive knowledge of cloud-native security across Azure and/or AWS.</h2></li><li><h2 class="jobSectionHeader">
Systems Thinking: The ability to see the &quot;big picture,&quot; understanding how changes in identity management or network design impact the global data footprint. Expertise in modern authentication protocols like OAuth 2.0, OpenID Connect, and SAML 2.0.</h2></li><li><h2 class="jobSectionHeader">
Technical Depth: Hands-on proficiency in secure network design, IAM, encryption standards, container security (e.g., Kubernetes), and CI/CD plus IaC guardrails.</h2></li><li><h2 class="jobSectionHeader">
AI-Native Behavior: You actively use AI today and can clearly articulate where it helps, where it introduces risk, and the necessary guardrails you apply. You understand the implications of Non-Human Identity and management strategies to reduce risk.,</h2></li></ul><h2 class="jobSectionHeader">
Why this role?</h2><ul><li><h2 class="jobSectionHeader">
Measurable Impact: You will have a track record of driving security-focused initiatives that unify technical security, enterprise architecture, application architecture, and business outcomes. You will empower business units to achieve their strategic goals with confidence while minimizing risk.</h2></li><li><h2 class="jobSectionHeader">
Cross-Functional Ownership: You will have the autonomy to partner with engineering, product, and compliance teams, leveraging your strong collaboration skills to challenge ideas respectfully, mentor others, and influence without direct authority.</h2></li><li><h2 class="jobSectionHeader">
Inclusive Culture: We value diverse perspectives and ensure every voice is heard. We are committed to building teams that include a variety of backgrounds, perspectives, and skills, as this is critical to helping us achieve our mission.</h2></li></ul> 
Be Human With Us:
Being human isn&rsquo;t about checking every box on a list. It&rsquo;s about the experiences we have, people we meet, and the perspectives we share. So, if you have the skills but are hesitant to apply because of your background, apply anyway. We need amazing people like you to help us challenge the conventional and think differently about the problems that we&rsquo;re solving. We&rsquo;re in this together. Come be human, with us. 
 
Use of AI Technology:
We use technology, including automated and AI-assisted tools, to support certain aspects of our recruitment process. These tools are designed to improve efficiency and enhance the candidate experience. AI tools are not used to make hiring decisions; all hiring decisions are made by our hiring teams.
What We Offer: 
When you join our team, you&rsquo;re not just accepting a job. You&rsquo;re making a career move. Here&rsquo;s how we&rsquo;ll support you in doing some of the most impactful work of your career:<ul><li>
Flextime, recognition, and support for autonomous work: Flexible time off with ample learning and development opportunities to continue growing your career. We offer a comprehensive onboarding program, leadership training for Titans at all levels, and other programs and events. Great work is rewarded through Bonusly, peer-nominated awards, and more.</li><li>
Holistic health and wellness benefits: Company-paid medical, dental, and vision (with 100% employer paid options and 90% coverage for dependents), FSA and HSA, 401k match, and telehealth options including memberships to One Medical.</li><li>
Support for Titans at all stages of life: Parental leave and support, up to $20k in fertility services (i.e. IUI and IVF), surrogacy, and adoption reimbursement, on demand maternity support through Maven Maternity, free breast milk shipping through Maven Milk, pet insurance, legal advisory services, financial planning tools, and more.</li></ul>
At ServiceTitan, we celebrate individuality and uniqueness. We believe that the convergence of fresh perspectives and experiences from all walks of life is what makes our product and culture so great. We strongly encourage people from underrepresented groups to apply. We do not discriminate against employees based on race, color, religion, sex, national origin, gender identity or expression, age, disability, pregnancy (including childbirth, breastfeeding, or related medical condition), genetic information, protected military or veteran status, sexual orientation, or any other characteristic protected by applicable federal, state or local laws.
ServiceTitan is committed to fair and equitable compensation for all of our employees. We thoughtfully consider a wide range of factors when determining individual compensation.The expected salary range for this role for candidates residing in the United States is between $204,000 USD - $272,900 USD. Compensation for candidates residing outside the United States will vary by location and the specific salary range will be discussed during the hiring process. Actual compensation for an individual may vary depending on skills, performance over time, qualifications, experience, and location. In addition to the base salary, the total compensation package also includes an annual bonus, equity and a holistic suite of benefits.</div>

Principal, Security Architect

American business solutions inc

Proven expertise in specific security technologies (e.g., SIEM, DLP, IAM, cloud security) Required 5 Years Experience in information security, with a focus on security technologies. Required 5 Years Excellent verbal and written communication skills; ability to convey complex security concepts in a clear and relatable manner. Required 3 Years Skill in determining how a security system should work (including its resilience and dependability capabilities) and how changes in conditions, oper Required Ability to map system configuration details to Security Policy Controls. Required Ability to work independently and as part of a team. Required Proficient in documentation tools (e.g., Microsoft Word, Adobe Acrobat, Confluence). Highly desired 3 Years Excellent organizational skills and attention to detail. Highly desired 3 Years Strong verbal and written communication skills. Highly desired 3 Years Experience in project management and leading cross-functional initiatives Highly desired Relevant certifications (e.g., CISSP, CISM, CCSP) preferred. Highly desired 3 Years

Search 10000+ Security architect jobs near you this March. New roles added regularly across leading industries. Apply today.

10000 security architect jobs Near Me

Security Architect

Cyber Security Architect

Cyber Security Architect

Product Security Architect

Identity Security Architect

Principal, Security Architect

Security Architect