security architect

<div><p><b>AI, Security Architect</b></p>
<p>
At BNY, our culture allows us to run our company better and enables employees&rsquo; growth and success. As a leading global financial services company at the heart of the global financial system, we influence nearly 20% of the world&rsquo;s investible assets. Every day, our teams harness cutting-edge AI and breakthrough technologies to collaborate with clients, driving transformative solutions that redefine industries and uplift communities worldwide.</p>
<p>
Recognized as a top destination for innovators, BNY is where bold ideas meet advanced technology and exceptional talent. Together, we power the future of finance &ndash; and this is what #LifeAtBNY is all about. Join us and be part of something extraordinary.</p>
<p>
We&rsquo;re seeking a future team member for the role of AI Security Architect to join our Cybersecurity team. This role can be in Pittsburgh, PA or Lake Mary, FL or NYC, NY.</p>
<p><b>Overview</b></p>
<p>
BNY is seeking a AI Security Architect to lead the design, implementation, and governance of security controls for AI/ML systems across the enterprise. This role will define the target architecture and security patterns for AI-enabled products and platforms, ensuring resilient, compliant, and trustworthy AI. The ideal candidate combines deep expertise in cybersecurity and cloud with hands-on knowledge of modern AI/ML infrastructure, data protection, adversarial threat models, and secure MLOps.</p>
<p><b>
Primary Responsibilities</b></p>
<ul>
<li>Define enterprise AI security architecture: develop reference architectures, guardrails, and standards for secure data pipelines, model training/inference, and AI-integrated applications across on-prem and cloud.</li>
<li>Secure MLOps/ML platforms: architect identity, secrets management, network segmentation, and least-privilege access for feature stores, model registries, orchestration, and deployment pipelines.</li>
<li>Data protection by design: establish controls for sensitive data ingestion, anonymization/pseudonymization, encryption (at rest/in transit), tokenization, and lineage across AI workflows.</li>
<li>Adversarial ML defense: design controls and tests for model poisoning, evasion, model theft/exfiltration, prompt injection, jailbreaking, data leakage, and output manipulation.</li>
<li>AI supply chain security: govern third-party models, APIs, and datasets; enforce SBOMs for AI components; evaluate provenance, licensing, and dependency risk.</li>
<li>Policy and governance integration: translate AI security requirements into actionable standards and control evidence; align with enterprise risk, compliance, and model governance processes.</li>
<li>Threat modeling and security testing: lead threat modeling for AI systems; design red-teaming and secure evaluation methods for models and agents; integrate chaos/resilience testing.</li>
<li>Secure development lifecycle: embed AI-specific security checks (static/dynamic scans, IaC policy-as-code, data quality gates, bias/robustness checks) into CI/CD and change management.</li>
<li>Runtime protection: implementing guardrails, content filters, output validation, rate limiting, anomaly detection, and monitoring for AI services and agentic workflows.</li>
<li>Observability and incident response: define logging/telemetry (model inputs/outputs, drift, performance, safety events); integrate AI-specific playbooks into SOC operations.</li>
<li>Zero Trust for AI: design identity-aware access, micro-segmentation, and continuous verification for data scientists, services, and agents.</li>
<li>Privacy and ethics controls: partner with privacy and legal to operationalize consent, minimization, purpose limitation, and responsible AI guardrails, including human-in-the-loop where appropriate.</li>
<li>Resilience and continuity: design disaster recovery, backup/restore, model reproducibility, and contingency plans for AI platforms and critical use cases.</li>
<li>Vendor/platform assessments: evaluate cloud AI services, open-source frameworks, and commercial tools for security posture, compliance, and fit-for-purpose.</li>
<li>Risk management: lead control testing and risk assessments for AI initiatives; document residual risks and remediation plans; support audits and regulatory queries.</li>
<li>Reference implementations: deliver secure patterns, sample code, and automation (e.g., reusable Terraform/Policy-as-Code, secrets patterns, logging schemas) to accelerate adoption.</li>
<li>Stakeholder leadership: partner with platform engineering, data science, enterprise architecture, cyber operations, and product teams to drive end-to-end secure outcomes.</li>
<li>Coaching and enablement: build education and guidance for architects, data scientists, and engineers on secure AI practices, design patterns, and common pitfalls.</li>
<li>Continuous improvement: track emerging threats, standards, and best practices; lead updates to architecture and controls; measure effectiveness via KPIs and control health.</li>
</ul>
<p><b>Required Qualifications</b></p>
<ul>
<li>12 years in cybersecurity/enterprise security architecture with 3 years focused on AI/ML or data platform security at scale.</li>
<li>Expertise in cloud security (AWS/Azure/GCP) including identity, secrets management, key management (KMS/HSM), network segmentation, and policy-as-code.</li>
<li>Strong knowledge of AI/ML workflows: data ingestion/feature engineering, model training/inference, MLOps tooling (model registry, orchestrators, serving).</li>
<li>Practical experience with adversarial ML concepts and defenses; familiarity with model robustness, prompt injection risks, and secure evaluation methods.</li>
<li>Proficiency in designing observability/telemetry for AI systems (e.g., logging prompts/outputs, drift/quality metrics, safety events) with SIEM/SOAR integration.</li>
<li>Hands-on with infrastructure-as-code (Terraform/CloudFormation), CI/CD, and secure SDLC practices tailored to data/ML systems.</li>
<li>Deep understanding of data protection (encryption, tokenization, anonymization), privacy by design, and secure data lifecycle management.</li>
<li>Strong stakeholder management and communication skills; ability to convert complex risks into clear architecture decisions and implementation guidance.</li>
</ul>
<p><b>Preferred Qualifications</b></p>
<ul>
<li>Experience architecting secure AI agents and LLM applications including guardrails, content filters, and output validation.</li>
<li>Familiarity with standards and frameworks relevant to AI and data (e.g., NIST AI RMF, cloud CIS benchmarks, OWASP for ML/LLM, privacy controls).</li>
<li>Background in model governance and risk management (e.g., testing for drift, bias, stability, and explainability) and integration with enterprise control frameworks.</li>
<li>Programming/scripting proficiency (Python preferred) for reference implementations, automation, and security tooling integrations.</li>
<li>Experience with container security, Kubernetes, service mesh, and microservices patterns in AI platforms.</li>
<li>Prior leadership in enterprise-scale transformations, enabling secure adoption of AI across multiple business lines.</li>
</ul>
<p>At BNY, our culture speaks for itself, check out the latest BNY news at:</p>
<p>
BNY Newsroom</p>
<p>
BNY LinkedIn</p>
<p> Here&rsquo;s a few of our recent awards:</p>
<ul>
<li>America&rsquo;s Most Innovative Companies, Fortune, 2025</li>
<li>World&rsquo;s Most Admired Companies, Fortune 2025</li>
<li>&ldquo;Most Just Companies&rdquo;, Just Capital and CNBC, 2025</li></ul><br>
<p><br>
Our Benefits and Rewards:</p>
<p>
BNY offers highly competitive compensation, benefits, and wellbeing programs rooted in a strong culture of excellence and our pay-for-performance philosophy. We provide access to flexible global resources and tools for your life&rsquo;s journey. Focus on your health, foster your personal resilience, and reach your financial goals as a valued member of our team, along with generous paid leaves, including paid volunteer time, that can support you and your family through moments that matter.</p><p><br>
BNY assesses market data to ensure a competitive compensation package for our employees. The base salary for this position is expected to be between $142,000 and $259,000 per year at the commencement of employment. However, base salary if hired will be determined on an individualized basis, including as to experience and market location, and is only part of the BNY total compensation package, which, depending on the position, may also include commission earnings, discretionary bonuses, short and long-term incentive packages, and Company-sponsored benefit programs.<br>
This position is at-will and the Company reserves the right to modify base salary (as well as any other discretionary payment or compensation) at any time, including for reasons related to individual performance, change in geographic location, Company or individual department/team performance, and market factors.</p></div>

AI Security Architect

American Recruiting & Consulting Group

<div><h2 class="jobSectionHeader"><b>AI Security Architect (LLM Security / Guardrails / Enterprise Architecture)</b></h2><p><b>
100% REMOTE!</b><br>
<b>W2 Contract Only | No C2C / No 1099 / No Third-Party Vendors</b><br>
<b>Must have permanent US work authorization or USA Citizenship (no sponsorship now or in the future)</b></p><p></p><h3 class="jobSectionHeader"><b>
SUMMARY STATEMENT</b></h3><p>
ARC Group is seeking an experienced <b>AI Security Architect</b> for a direct client in the healthcare insurance domain. This role is responsible for designing and implementing <b>enterprise AI security architecture</b>, with a strong focus on securing <b>locally hosted AI/LLM models</b>, defining and enforcing <b>AI guardrails</b>, and establishing <b>security standards, blueprints, and governance frameworks</b> across AI-driven platforms.</p><p>
This is a <b>true Architect-level role</b> requiring hands-on experience in <b>AI security design, threat modeling, and control implementation</b> across the full AI lifecycle.</p><p></p><h3 class="jobSectionHeader"><b>
ESSENTIAL RESPONSIBILITIES</b></h3><ul><li>
Design and implement <b>end-to-end AI security architecture</b> for locally hosted AI/LLM platforms.</li><li>
Define and enforce <b>AI guardrails</b>, including prompt injection prevention, input/output filtering, and response validation controls.</li><li>
Develop and maintain <b>enterprise security blueprints, architecture standards, and design patterns</b> for AI/ML platforms.</li><li>
Perform <b>AI threat modeling</b> and identify risks such as model misuse, adversarial inputs, and data leakage.</li><li>
Implement <b>security controls across the AI lifecycle</b>, including data ingestion, model training, inference, and output handling.</li><li>
Establish and monitor <b>security metrics and controls</b> to evaluate effectiveness of AI security architecture.</li><li>
Collaborate with engineering, data science, and infrastructure teams to ensure <b>secure AI platform design and deployment</b>.</li><li>
Participate in <b>architecture governance, design reviews, and technology evaluations</b>, including build vs. buy decisions.</li><li>
Evaluate and recommend <b>AI security tools, frameworks, and solutions</b> aligned to enterprise standards.</li><li>
Maintain <b>architecture documentation, security standards, and operational procedures</b>.</li><li>
Provide leadership on <b>emerging AI security threats, vulnerabilities, and industry trends</b>.</li></ul><p></p><h3 class="jobSectionHeader"><b>
REQUIRED EXPERIENCE</b></h3><ul><li><b>
10+ years</b> of overall cybersecurity experience with strong focus on architecture and design.</li><li><b>
2+ years of CURRENT hands-on experience in AI security architecture (MANDATORY)</b>.</li><li>
Proven experience securing <b>locally hosted / on-prem AI or LLM models</b>.</li><li>
Hands-on experience implementing <b>AI guardrails</b>, including:<ul><li>
Prompt injection prevention</li><li>
Input/output filtering</li><li>
Response validation and policy enforcement</li></ul></li><li>
Strong experience designing <b>end-to-end security architecture</b> for AI/ML platforms.</li><li>
Deep understanding of <b>AI/LLM threat landscape</b> (prompt injection, data leakage, model abuse).</li><li>
Experience with <b>enterprise security architecture frameworks and governance models</b>.</li><li>
Hands-on experience with <b>cloud security (AWS and/or Azure)</b>.</li><li>
Strong background in <b>Identity and Access Management (IAM), RBAC, and secure access controls</b>.</li></ul><p></p><h3 class="jobSectionHeader"><b>
REQUIRED CERTIFICATIONS</b></h3><ul><li><b>
CISSP (REQUIRED at time of submission)</b><ul><li>
Certification number must be included on resume</li><li>
Will be validated during background screening</li></ul></li></ul><p></p><h3 class="jobSectionHeader"><b>
PREFERRED QUALIFICATIONS</b></h3><ul><li>
Experience in healthcare or other <b>regulated environments (HIPAA, PHI protection)</b>.</li><li>
Experience working in <b>Agile / Scaled Agile environments</b>.</li><li>
Exposure to <b>AI governance frameworks, compliance, or risk management practices</b>.</li><li>
Experience with <b>enterprise security monitoring, metrics, and risk reporting</b>.</li></ul><p></p><h3 class="jobSectionHeader"><b>
ADDITIONAL REQUIREMENTS</b></h3><ul><li>
Must demonstrate <b>true architecture ownership</b> (not just implementation or support roles).</li><li>
Must have current, hands-on involvement in <b>AI security architecture initiatives</b>.</li><li>
Strong communication skills with ability to explain complex security architectures to technical and non-technical stakeholders.</li><li>
Must be <b>actively staying current</b> with rapidly evolving AI security technologies and threats.</li></ul>
-<p>
ARC Group is a Forbes-ranked top 20 recruiting and executive search firm working with clients nationwide to recruit the highest quality technical resources. We achieve this by understanding both our candidates&rsquo; and clients&rsquo; goals and serving both with integrity and a shared desire to succeed.</p><p>
At ARC Group, we are committed to providing equal employment opportunities and fostering an inclusive work environment. We encourage applications from all qualified individuals regardless of race, ethnicity, religion, gender identity, sexual orientation, age, disability, or any other protected status.</p><p><b>
Position offered with no fee to the candidate.</b></p><p>
</p><p>z3AXN0x92B</p></div>

Renesas

<div><b>Job Description</b><p></p><p><b><br>
About the role:</b></p><p>
This role is responsible for making our software secure by design and keeping it secure throughout its lifecycle &mdash; from architecture and development to deployment and operations. The Architect will define security standards, embed security into engineering workflows, and ensure our SaaS platform meets enterprise-grade security and compliance expectations.</p><p><b>
 A day in the life of our Cloud Security Architect:</b></p><ul><li>
Define and maintain secure architecture patterns for cloud-native SaaS systems</li><li>
Review and approve system designs for security risks</li><li>
Lead threat modeling for new features and platform components</li><li>
Design secure multi-tenant isolation models</li><li>
Architect secure API frameworks and integration patterns</li><li>
Ensure tenant data isolation and encryption strategies</li><li>
Continuously improve Secure SDLC practices</li><li>
Define secure coding standards and guardrails</li><li>
Architect secure cloud environments</li><li>
Define IAM, least-privilege access models, and service-to-service authentication</li><li>
Participate in security audits and customer security reviews</li><li>
Lead security incident root-cause analysis for application-layer incidents</li><li>
Improve detection and monitoring for application-level threats</li><li>
Collaborate with SRE to ensure security does not compromise reliability</li></ul><p><b>
Who We&rsquo;re Looking For:</b></p><ul><li>
8+ years in software engineering, security engineering, or cloud architecture</li><li>
Strong expertise in cloud-native architecture (microservices, containers, Kubernetes)</li><li>
Deep understanding of application security (OWASP Top 10, secure coding)</li><li>
Strong knowledge of IAM, authentication protocols (OAuth2, OIDC, SAML)</li><li>
Experience designing secure multi-tenant SaaS systems</li><li>
Hands-on experience with one major cloud provider (AWS preferred)</li></ul><p><b>
Preferred Qualifications:</b></p><ul><li>
Experience in enterprise SaaS environments</li><li>
Experience with regulated industries (FedRAMP, CMMC)</li><li>
Knowledge of tenant-based encryption models</li><li>
Experience implementing zero-trust architecture</li><li>
Background in vulnerability disclosure or bug bounty programs</li></ul><p><i>
The salary range for this role is $240,000 - $260,000. </i><i>Actual compensation packages within this range are based on a wide array of factors unique to each candidate and role requirements, including but not limited to skill set, years and depth of experience, certifications, and specific location.</i></p><b><br>
Additional Information</b><div></div><p><br>
Renesas is an embedded semiconductor solution provider driven by its Purpose &lsquo;<b>To Make Our Lives Easier</b>.&rsquo; As the industry&rsquo;s leading expert in embedded processing with unmatched quality and system-level know-how, we have evolved to provide scalable and comprehensive semiconductor solutions for automotive, industrial, infrastructure, and IoT industries based on the broadest product portfolio, including High Performance Computing, Embedded Processing, Analog &amp; Connectivity, and Power.<br>
<br>
With a diverse team of over 22,000 professionals in more than 30 countries, we continue to expand our boundaries to offer enhanced user experiences through digitalization and usher into a new era of innovation. We design and develop sustainable, power-efficient solutions today that help people and communities thrive tomorrow, &lsquo;<b>To Make Our Lives Easier</b>.&rsquo;<br>
<br>
At Renesas, you can:</p><ul><li><b>
Launch and advance your career </b>in technical and business roles across four Product Groups and various corporate functions. You will have the opportunities to explore our hardware and software capabilities and try new things.</li><li><b>
Make a real impact </b>by developing innovative products and solutions to meet our global customers' evolving needs and help make people&rsquo;s lives easier, safe and secure.</li><li><b>
Maximize your performance and wellbeing</b> in our flexible and inclusive work environment. Our people-first culture and global support system, including the remote work option and Employee Resource Groups, will help you excel from the first day.</li></ul><p>
Are you ready to own your success and make your mark?</p><p>
Join Renesas. <b>Shape Your Future with Us</b>.</p><p>
Renesas Electronics is an equal opportunity and affirmative action employer, committed to celebrating diversity and fostering a work environment free of discrimination on the basis of sex, race, religion, national origin, gender, gender identity, gender expression, age, sexual orientation, military status, veteran status, or any other basis protected by federal, state or local law. For more information, please read our Diversity &amp; Inclusion Statement.</p><p>
Renesas Electronics deals with dual-use technology that is subject to U.S. export controls regulations. Under these regulations it may be necessary for Renesas to obtain U.S. government export license prior to release of technology to certain persons. The decision whether or not to file or pursue an export license application is at the sole discretion of Renesas.</p><p>
We have adopted a hybrid model that gives employees the ability to work remotely two days a week while ensuring that we come together as a team in the office the rest of the time. The designated in-office days are Tuesday through Thursday for innovation, collaboration and continuous learning.</p></div>

Cloud Security Architect

Southern Company

<div><p><b>Identity Security Architect</b></p>
<p><b>Position Overview:</b></p>
<p>Southern Company, a major U.S. energy firm, is seeking an experienced <b>Identity Security Architect</b> to design creative identity solutions and reduce risk. <b>This is a primarily on-site role with 4 days per week in-office presence expected.</b></p>
<p>This role will have responsibility for setting the strategic direction for identity security specifically across our various cloud tenants and in support of the company&rsquo;s desire for agentic transformation. It will directly support the company&rsquo;s efforts to mitigate real and potential cyber threats to the company&rsquo;s facilities, personnel, technology, operations, and brand &ndash; including critical electric and gas utility infrastructure and its privately owned telecommunications network.</p>
<p>Although the position is cloud centric there is expected to be heavy involvement with the design and security of agents and agentic use cases. There is likely future engagement with on-prem applications as well, as legacy datastores are set for modernization and ingestion into large language models. Applicants should be well rounded in their understanding of different security disciplines such as networking, endpoint, data, cloud, application security, monitoring and, of course, identity. They should be able to align execution with an overall strategy to increase identity maturity, anticipate future requirements for complex hybrid and multi-cloud environments, and drive identity initiatives via influence and relationships.</p>
<p>Southern Company is headquartered in Atlanta, and we bring energy to homes and businesses across the country. We&rsquo;ve made our name as a leading producer of clean, safe, reliable and affordable energy, and we approach each day as a vital step in building the future of energy. We&rsquo;re always looking ahead, and our innovations in the industry &ndash; from new nuclear to deployment of electric transportation and renewables &ndash; to help brighten the lives and businesses of millions of customers nationwide. Our team is critical to building the future of energy with secure, resilient, and sustainable cyber solutions.</p>
<p><b>Job Responsibilities:</b></p>
<ul><li><div>Set strategic direction for agentic, AI, and workload identity security across the organization and advise leadership on emerging identity risks and opportunities.
</div></li><li><div>Define and evolve Southern Company&rsquo;s agentic identity architecture, including non‑human identities (AI agents, service principals, workloads, automation, MCP servers).
</div></li><li><div>Collaborate with engineering and security teams to integrate SPIFFE/SPIRE-based identity mechanisms, ensuring scalable, robust, and policy-driven workload authentication and authorization.
</div></li><li><div>Serve as a trusted advisor by designing secure, scalable identity and authorization patterns that enable AI‑driven business capabilities.
</div></li><li><div>Align forward‑looking identity strategy with business goals across multi‑cloud, SaaS, and AI platforms.
</div></li><li><div>Establish identity guardrails for autonomous agents, including least privilege, intent‑bounded access, and lifecycle governance.
</div></li><li><div>Engage third‑party experts for architecture reviews, AI risk assessments, and emerging best practices.
</div></li><li><div>Influence adoption through a product‑ and enablement‑oriented approach to identity services, patterns, and platforms.
</div></li><li><div>Monitor and prepare for regulatory, ethical, and security impacts of AI‑driven and autonomous systems.
</div></li><li><div>Contribute to standards, policies, and reference architectures for human, non‑human, and agentic identity.
</div></li><li><div>Improve processes supporting automation, ephemeral access, workload trust, and identity observability.
</div></li><li><div>Lead cross‑functional initiatives involving security, AI, cloud, and engineering teams.
</div></li><li><div>Mentor and educate teams on modern identity, zero trust, and agent safety principles.
</div></li></ul><p><b>Qualifications:</b></p>
<p><b>Required</b></p>
<ul><li><div>3+ years designing or operating cloud identity architectures across multiple providers (Azure/Entra, AWS IAM, GCP IAM, SaaS).
</div></li><li><div>Experience building or contributing to an identity security program, including governance and standards.
</div></li><li><div>Strong understanding of non-human identities: service accounts, workloads, APIs, automation, and AI agents.
</div></li><li><div>Hands on experience with OAuth 2.0, OIDC, token lifecycles, certificates, and trust boundaries.
</div></li><li><div>Understanding of authorization models beyond RBAC (claims based, policy based, attribute based).
</div></li><li><div>Familiarity with AI / agent execution models, delegated authority, and identity risks introduced by autonomy.
</div></li><li><div>Ability to translate security requirements into developer friendly architectures and patterns.
</div></li><li><div>Strong communication skills to position identity as a business and platform enabler.
</div></li><li><div>Ability to lead initiatives from concept through delivery with minimal oversight.
</div></li><li><div>Must pass Insider Threat Program background checks.
</div></li></ul><p><b>Desired</b></p>
<ul><li><div>Experience securing AI platforms, LLM integrations, or agent frameworks.
</div></li><li><div>Familiarity with Model Context Protocol (MCP), agent to tool authentication, or workload mediation patterns.
</div></li><li><div>Experience with API security, token introspection, and fine-grained authorization.
</div></li><li><div>Programming or scripting proficiency (Python, JavaScript, REST/Graph APIs, JSON).
</div></li><li><div>Knowledge of Zero Trust Architecture, NIST, OWASP, and cloud security frameworks.
</div></li><li><div>Security certifications (CISSP, CCSP, CISA, GIAC, CRISC, etc.).
</div></li><li><div>Awareness of nation state, supply chain, and AI enabled threat models.
</div></li><li><div>Interest in applying agentic and AI security concepts to critical infrastructure and energy systems.
</div></li></ul><p>This position falls under the company&rsquo;s Insider Threat Program and will have access to, and control over sensitive data, systems or assets. Enhanced personnel screening, which includes a background review, drug screen and psychological assessment, will be required if you are selected for this position</p>
<p><b>About Southern Company</b></p>
<p>Southern Company (NYSE: SO ) is a leading energy provider serving 9 million customers across the Southeast and beyond through its family of companies. Providing clean, safe, reliable and affordable energy with excellent service is our mission. The company has electric operating companies in three states, natural gas distribution companies in four states, a competitive generation company, a leading distributed energy solutions provider with national capabilities, a fiber optics network and telecommunications services. Through an industry-leading commitment to innovation, resilience and sustainability, we are taking action to meet customers' and communities' needs while advancing our goal of net-zero greenhouse gas emissions by 2050. Our uncompromising values ensure we put the needs of those we serve at the center of everything we do and are the key to our sustained success. We are transforming energy into economic, environmental and social progress for tomorrow. Our corporate culture has been recognized by a variety of organizations, earning the company awards and recognitions that reflect Our Values and dedication to service. To learn more, visit www.southerncompany.com .</p>
<p>Southern Company invests in the well-being of its employees and their families through a comprehensive total rewards strategy that includes competitive base salary, annual incentive awards for eligible employees and health, welfare and retirement benefits designed to support physical, financial, and emotional/social well-being. This position may also be eligible for additional compensation, such as an incentive program, with the amount of any bonus/awards subject to the terms and conditions of the applicable incentive plan(s). A summary of the benefits offered for this position can be found here https://seo.nlx.org/southernco/pdf/SOCO-Benefits.pdf . Additional and specific details about total compensation and beneﬁts will also be provided during the hiring process.</p>
<p>Southern Company is an equal opportunity employer where an applicant's qualifications are considered without regard to race, color, religion, sex, national origin, age, disability, veteran status, genetic information, sexual orientation, gender identity or expression, or any other basis prohibited by law.</p>
<p>Job Identification: 19126</p>
<p>Job Category: Cybersecurity</p>
<p>Job Schedule: Full time</p>
<p>Company: Southern Company Services</p></div>

Identity Security Architect

Altec Industries

<div><p><b>Responsibilities</b>
</p><p>The Application Security Architect partners with software development, platform, cybersecurity, and cloud engineering teams to embed security throughout the modern software development lifecycle (SDLC). This role focuses on secure-by-design practices, DevSecOps strategy, roadmap and enablement, and risk-based vulnerability management across internally developed, third-party, SaaS, and cloud-native applications. The AppSec Architect serves as the strategic owner of the Application Security Roadmap, defines target-state AppSec maturity aligned to business growth, and prioritizes AppSec investments and tooling rationalization. The role serves as a trusted advisor to development teams and the key contributor to the organization&rsquo;s overall Secure Software Development Program.
</p><p></p><p><b>Key Responsibilities</b><b>
</b></p><p>Secure SDLC &amp; DevSecOps
</p><ul><li><p>Embed application security controls into CI/CD pipelines, including automated SAST, DAST, IAST, SCA, secrets detection, and IaC scanning.
</p></li><li><p>Establish standardized security controls across platforms.
</p></li><li><p>Design exceptions and compensating controls.
</p></li><li><p>Partner with development teams to implement shift-left security while maintaining delivery velocity.
</p></li><li><p>Define and maintain secure coding standards, security design patterns, and reference architectures.
</p></li><li><p>Participate in architecture and design reviews, including threat modeling for new applications and major changes.
</p></li><li><p>Perform research and development (R&amp;D) into existing processes and tooling opportunities
</p></li></ul><p></p><p>Application &amp; Cloud Security Assessment
</p><ul><li><p>Identify and assess security risks in web, mobile, API, SaaS, and cloud-native applications developed internally or by third parties.
</p></li><li><p>Perform or coordinate:
</p><ul><li><p>Source code reviews (manual and automated)
</p></li><li><p>Application vulnerability assessments and penetration tests
</p></li><li><p>API and microservices security testing &amp; analysis
</p></li><li><p>Cloud configuration and IaC security reviews
</p></li></ul></li><li><p>Validate findings, reduce false positives, and prioritize remediation based on business risk.
</p></li><li><p>Establish reusable security architecture patterns for cloud-native and distributed systems.
</p></li></ul><p></p><p>Vulnerability &amp; Risk Management
</p><ul><li><p>Manage application security findings through a centralized vulnerability or risk management platform.
</p></li><li><p>Work with development teams to define practical, risk-based remediation guidance.
</p></li><li><p>Track remediation progress, verify fixes, and support exception/risk acceptance processes.
</p></li><li><p>Contribute to application security metrics, KPIs, and executive-level reporting.
</p></li><li><p>Translate technical debt and vulnerabilities into business risk and exposure.
</p></li></ul><p></p><p>Open Source &amp; Supply Chain Security
</p><ul><li><p>Assess and manage risks related to open-source dependencies, libraries, and third-party components.
</p></li><li><p>Support Software Composition Analysis (SCA) and software supply chain security initiatives (e.g., dependency hygiene, SBOMs).
</p></li><li><p>Evaluate security posture of third-party applications and vendors in collaboration with risk management team.
</p></li><li><p>Verify compliance with third-party component licensing models
</p></li></ul><p></p><p>Software Compliance
</p><ul><li><p>Lead software compliance activities related to application vulnerabilities, data exposure, or insecure design.
</p></li><li><p>Support application-related forensic analysis and root-cause investigations.
</p></li><li><p>Assist with compliance and assurance activities related to secure development (e.g., NIST, ISO, SOC, internal audits).
</p></li></ul><p></p><p>Enablement &amp; Education
</p><ul><li><p>Develop and deliver application security training for developers and cybersecurity team
</p></li><li><p>Provide hands-on guidance and documentation to improve developer security maturity.
</p></li><li><p>Act as a security champion advocate, helping teams make informed security decisions.
</p></li></ul><p></p><p><b>Required Education, Experience, and Skills</b><b>
</b></p><ul><li><p>High School Diploma/GED Required
</p></li><li><p>Bachelor&rsquo;s Degree (Technical Degree Preferred) and 6 Years Relevant Experience OR 8 Years Relevant Experience
</p></li><li><p>12+ years of combined experience across software engineering, platform/cloud engineering, application security, &amp; DevSecOps / SRE with strong cybersecurity ownership preferred
</p><ul><li><p>5+ years in hands-on software engineering or platform/cloud engineering preferred
</p></li><li><p>7+ years in application security, DevSecOps, or secure architecture preferred
</p></li></ul></li><li><p>Strong understanding of modern SDLCs, Agile, and CI/CD practices.
</p></li><li><p>Hands-on experience with at least one major programming language (e.g., Java, C#, Python, JavaScript).
</p></li><li><p>Practical knowledge of:
</p><ul><li><p>Web, mobile, and API security
</p></li><li><p>Authentication and authorization models (OAuth2, OIDC, JWT, SAML)
</p></li><li><p>OWASP Top 10 and API Top 10
</p></li></ul></li><li><p>Familiarity with cloud platforms (AWS, Azure, and/or OCI) and cloud-native services.
</p></li><li><p>Working knowledge of networking fundamentals, encryption, and secure communications.
</p></li><li><p>Excellent written and verbal communication skills, with the ability to translate security risk into business impact.
</p></li></ul><p></p><p><b>Preferred / Beneficial Qualifications</b><b>
</b></p><ul><li><p>Experience with application security tools such as SAST, DAST, IAST, SCA, secrets scanning, or IaC security platforms.
</p></li><li><p>Experience securing containers, Docker, and serverless workloads.
</p></li><li><p>Knowledge of Infrastructure as Code frameworks (e.g., Terraform, CloudFormation).
</p></li><li><p>Familiarity with threat modeling frameworks (e.g., STRIDE).
</p></li><li><p>Security or development certifications such as:
</p><ul><li><p>CSSLP, CISSP, GWAPT, GWEB, OSWE, or equivalent
</p></li><li><p>Cloud security certifications (AWS, Azure, or GCP)
</p></li></ul></li></ul><p></p><p><b>Behavioral &amp; Professional Expectations</b><b>
</b></p><ul><li><p>Strong collaboration skills; ability to influence without authority.
</p></li><li><p>Comfortable balancing security risk with business and delivery priorities.
</p></li><li><p>Highly organized, detail-oriented, and self-directed.
</p></li><li><p>Customer-service mindset toward internal development teams.
</p></li><li><p>Ability to remain effective in fast-paced, evolving technical environments.
</p></li><li><p>Commitment to confidentiality, ethical conduct, and continuous improvement.
</p></li></ul><p></p><p><b>Additional Information</b><b>
</b></p><ul><li><p>Travel: 0&ndash;25% (as needed)
</p></li><li><p>Work hours may occasionally include non-standard hours to support critical releases or incidents.
</p></li><li><p>Job level and scope may be adjusted based on experience and qualifications.
</p></li></ul><p><b>Experience Level Adjustmnt</b>
</p><p><i>Should the selected candidate meet the qualifications of a more experienced level in the career path, the job level may be adjusted.</i></p><p><b>
Benefits</b>
</p><p>Altec offers a competitive salary that rewards performance and dedication, along with a comprehensive benefits package that includes:</p><ul><li>
Medical, Dental, Vision and Prescription Drug Program</li><li>
Retirement 401(k) Traditional or Roth Program Options with Company Match</li><li>
Vacation and Holidays</li><li>
Parental Leave</li><li>
Short Term and Long Term Disability Leave</li><li>
Flexible Spending Accounts</li><li>
Tuition Assistance Program</li><li>
Employee Assistance and Mental Health/Substance Abuse Program</li><li>
Life Insurance, Accidental Death and Dismemberment Insurance</li><li>
Supplemental Insurance including Hospital Indemnity, Critical Illness and Accident Insurance</li><li>
Additional Wellness Programs and Rewards Available</li></ul><p><b>
Why Join Altec?</b>
</p><p>If you're considering a career with Altec, there's never been a better time to join us! Our company was founded on values that place the customer first and prioritize our people as our greatest strength. Over the years, those values and our talented associates have helped us to earn the trust and confidence of customers worldwide. Today, Altec is an innovative, financially sound company that sets the standard of excellence in design, manufacturing and service &mdash; and that's why we're the ideal place for you to grow your career.</p><p>
Founded in 1929, Altec is a privately held company headquartered in Birmingham, Alabama. Altec specializes in the manufacture, sale and service of aerial devices, digger derricks, cranes and specialty equipment for the electric utility, telecommunications, tree care, construction, and light and signs markets. We help our customers dig deeper and reach higher in more than 100 countries around the world.
</p><p><b>EEO Statement</b>
</p><p>Altec Industries, Inc. and its affiliates are equal opportunity employers and maintain affirmative action plans to recruit, retain, develop, and promote qualified individuals without unlawful consideration of race, gender, color, religion, sexual orientation, gender identity, national origin, age, disability, citizenship status, veteran status, or any other characteristic protected by federal, state or local law. Altec strives to maintain a work environment free from unlawful discrimination and harassment, where associates are treated with respect and dignity.</p></div>

Application Security Architect

Arganteal Corporation

<div>
 <strong>
  Engagement Overview
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Candidates must have branch or multi-site in Banking or Retail experience (250+ sites minimum)
  </li>
  <li>
   Full-time remote contract - 40 hours/week, EST hours required
  </li>
  <li>
   6+ month contract with the possibility of extension to 1&ndash;2 years
  </li>
  <li>
   PSP (Physical Security Professional) or similar preferred
  </li>
  <li>
   This is NOT a hands-on keyboard design or deployment role. It is a strategic leadership position
  </li>
  <li>
   Immediate start required &mdash; candidates must be available to begin within 7 days of offer
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Position Summary
  <br/>
  <br/>
 </strong>
 The Branch Physical Security Architect is a senior leadership role responsible for the end-to-end architectural direction of physical security technologies across a banking retail branch network. As the principal technical authority for this engagement, you will define standards, lead multi-workstream programs, and serve as the primary point of contact for the client's executive leadership.
 <br/>
 <br/>
 This role provides strategic oversight, not hands-on implementation, across new branch builds, renovations, technology refreshes, and large-scale security programs. You will guide engineering teams, integrators, and vendors toward consistent, compliant, and resilient security outcomes while ensuring alignment with enterprise security architecture and regulatory requirements.
 <br/>
 <br/>
 You will work cross-functionally with the client's PMO, IT Network Engineering, Facilities, Risk &amp; Compliance, and external partners, serving as the single authoritative voice on branch physical security architecture.
 <br/>
 <br/>
 <strong>
  Leadership Attributes &amp; Soft Skills
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Executive presence with the ability to communicate complex technical concepts to C-Suite and senior stakeholders
  </li>
  <li>
   Strategic thinker who connects branch-level decisions to enterprise-wide security posture
  </li>
  <li>
   Collaborative leader who builds consensus across technical teams, PMO, facilities, and external partners
  </li>
  <li>
   Calm and decisive under pressure; guides teams through critical incidents without losing strategic focus
  </li>
  <li>
   Highly organized; manages multiple concurrent programs and shifting priorities with ease
  </li>
  <li>
   Self-driven and accountable; operates effectively with minimal oversight in a remote environment
  </li>
  <li>
   Strong written and verbal communication skills across both technical and executive audiences
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Key Responsibilities
  <br/>
  <br/>
 </strong>
 <strong>
  Architectural Leadership &amp; Standards
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Define, document, and govern architectural standards for physical security systems across all branch environments
  </li>
  <li>
   Develop and maintain the branch physical security technology roadmap aligned with corporate security strategy and regulatory frameworks
  </li>
  <li>
   Ensure consistent design principles, technology standards, and best practices are applied bank-wide
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Executive Engagement &amp; Program Leadership
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Serve as the primary liaison to the client's C-Suite, providing regular technical briefings and status updates &mdash; daily and weekly cadence
  </li>
  <li>
   Lead the Physical Security workstream within large-scale programs (new builds, renovations, technology refreshes) in close partnership with the PMO
  </li>
  <li>
   Define project scope, sequence deployments, manage risks, and ensure security deliverables align within overall program timelines
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Multi-Workstream Coordination
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Lead and provide technical direction to architects and engineers across multiple concurrent workstreams
  </li>
  <li>
   Coordinate across IT infrastructure, Facilities, Construction, Security Operations, and other workstreams to deliver cohesive solutions
  </li>
  <li>
   Review and approve design documents, architecture diagrams, and bills of materials
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Solution Design &amp; Integration Oversight
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Serve as design authority for branch physical security systems: CCTV/video surveillance, intrusion detection and alarms, access control, duress and life-safety systems
  </li>
  <li>
   Oversee integration architecture connecting security systems with IT infrastructure, alarm monitoring, and identity management platforms
  </li>
  <li>
   Balance security requirements, user experience, and cost-effectiveness across the branch network
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Vendor &amp; Technology Governance
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Drive evaluation, selection, and standardization of security technologies and vendor solutions across the portfolio
  </li>
  <li>
   Manage relationships with external integrators and service providers, ensuring adherence to technical requirements and quality standards
  </li>
  <li>
   Enforce solution consistency across multiple vendor products, platforms, and service contracts
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Risk Management &amp; Governance
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Chair or participate in design review boards to oversee branch security architecture decisions
  </li>
  <li>
   Contribute to risk assessments and mitigation planning for new implementations and change events
  </li>
  <li>
   Provide senior-level support during critical incidents, guiding engineering teams toward root-cause resolution and long-term fixes
  </li>
  <li>
   Continuously evaluate emerging physical security trends, regulatory changes, and threat intelligence to evolve branch security strategy
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Qualifications &amp; Technical Skills
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   PSP (Physical Security Professional) CPP, CISSP, or Certified Security Architect certification
  </li>
  <li>
   8+ years of progressive experience designing and implementing physical security systems across multi-site, branch, retail, or distributed facilities environments; financial services experience strongly preferred
  </li>
  <li>
   Deep expertise in CCTV/VMS, alarm and intrusion detection, electronic access control, and duress/life-safety systems &mdash; architecture, integration, and network dependencies
  </li>
  <li>
   Proven ability to develop and enforce enterprise-scale technical standards and reference architectures across numerous locations
  </li>
  <li>
   Strong understanding of networking as it applies to security systems: IP connectivity, PoE, VLANs, LAN/WAN, bandwidth considerations
  </li>
  <li>
   Demonstrated experience leading technical workstreams within large-scale programs, including stakeholder management at the executive level
  </li>
  <li>
   Familiarity with alarm monitoring workflows, security operations center models, and escalation/incident response frameworks
  </li>
  <li>
   Experience coordinating across IT, Facilities, Security Operations, PMO, and external vendors in a matrixed environment
  </li>
  <li>
   Proficiency with documentation standards: architecture diagrams, design specs, as-built records, and standards documentation
  </li>
  <li>
   Available to work full-time EST hours and start within 7 days of offer
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Preferred Qualifications
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Banking or financial services industry experience, particularly with regulatory and compliance requirements (FFIEC guidelines, audit frameworks, UL alarm certification standards)
  </li>
  <li>
   Familiarity with major physical security platforms in banking: Lenel access control, major VMS and camera systems, alarm monitoring and integrated physical security management software
  </li>
  <li>
   Understanding of how physical security intersects with cybersecurity frameworks and enterprise risk policies
  </li>
  <li>
   Prior experience in a senior security architecture role with multi-site delivery responsibility
  </li>
  <li>
   Exposure to 24x7 security operations, monitoring centers, or command center-based support model
   <br/>
   <br/>
  </li>
 </ul>
 Powered by JazzHR
 <br/>
 <br/>
 V03B6rjBNo
</div>


Physical Security Architect

General Dynamics Information Technology

<p></p><div><div><div><p>Your Impact</p><p>
Own your opportunity to work alongside federal civilian agencies. Make an impact by providing services that help the government ensure the well being and support of U.S. citizens.</p><p>
Job Description</p><div><p>
Advance your career while impacting our national security as a Senior Cloud Security Architect. Here, technologists have many paths to grow a meaningful career supporting cyber missions and operations across the federal government.</p><p></p><p>
As a Senior Cloud Security Architect, you will lead the strategic vision for protecting our multi-cloud ecosystem. You are responsible for designing the security blueprints that govern our entire digital footprint&mdash;from identity perimeters to AI-driven threat detection. This role requires a &quot;Security as Code&quot; mindset, where you build automated guardrails that empower developers to move at speed without compromising the safety of our data or infrastructure.</p><p></p><p>
MEANINGFUL WORK AND PERSONAL IMPACT</p><p>
This position will support the United States Postal Service (USPS) though:</p><ul><li>
Security Architecture Vision: Lead the design of a global Zero Trust architecture, ensuring robust identity governance (IAM), network micro-segmentation, and data encryption across AWS, Azure, or GCP.</li><li>
AI-Native Security Strategy: Architect specialized security frameworks for AI/ML pipelines, focusing on data privacy for training sets, model integrity, and securing LLM-integrated applications against emerging attack vectors.</li><li>
Automated Guardrails (Policy as Code): Develop and enforce enterprise-wide security policies using Terraform, etc., ensuring that non-compliant infrastructure is automatically remediated or blocked from deployment.</li><li>
Cloud Posture Management: Design and oversee the integration of CNAPP and CSPM tools to provide real-time visibility into misconfigurations, vulnerabilities, and excessive permissions.</li><li>
Threat Modeling &amp; Resilience: Conduct deep-dive threat modeling for complex cloud-native systems, simulating advanced persistent threats (APTs) and &quot;blast radius&quot; scenarios to strengthen system resilience.</li><li>
Security Consultancy: Act as the lead security advisor for the Cloud Architecture team, bridging the gap between DevOps agility and rigorous regulatory compliance (SOC2).</li></ul><p></p><p>
WHAT YOU&rsquo;LL NEED TO SUCCEED</p><p>
Education:</p><ul><li>
Bachelor&rsquo;s degree in computer science or a related field, preferred but not required.</li><li>
NOTE: If resources do not have a relevant college degree, an additional 4 years of relevant work experience is required.</li></ul><p>
Required Experience:</p><ul><li>
Experience: 12+ years in Cybersecurity, with at least 6 years focused on architecting secure cloud environments at scale.</li><li>
Security Platforms: Mastery of cloud-native security suites (e.g., AWS Security Hub, Azure Defender, GCP Security Command Center).</li><li>
Identity &amp; Access: Expert knowledge of Identity-First Security, including CIEM, Just-In-Time (JIT) access, and complex OIDC/SAML flows.</li><li>
Automation: Proficiency in Python, Go, or Bash to build custom security automations and integrate with SOAR platforms.</li><li>
DevSecOps: Deep experience embedding automated security testing (SAST/DAST/SCA) directly into CI/CD pipelines.</li><li>
Cloud Networking: Advanced understanding of secure connectivity, including SD-WAN, Cloud WAF, and Zero Trust Network Access (ZTNA).</li></ul><p>
Preferred Experience</p><ul><li>
Certifications: Top-tier credentials.</li><li>
Soft Skills: Strong ability to bridge the gap between &quot;Speed of DevOps&quot; and &quot;Rigors of Security&quot; while communicating clearly with executive leadership</li><li>
Leadership: Proven ability to influence technical roadmaps and present security risks clearly to C-suite stakeholders.</li></ul><p>
Core Objectives</p><ul><li>
Zero Standing Privilege: Help Transition the organization to a &quot;Zero Standing Privilege&quot; model for all production environments.</li><li>
Automated Compliance: Help Achieve automated auditing for core compliance frameworks (e.g., NIST, CIS Benchmarks).</li><li>
Mean Time to Detect (MTTD): Utilize AI-driven monitoring to reduce the detection time of anomalous cloud activity to minimum</li></ul><p>
Security Clearance Level:</p><ul><li>
Ability to obtain and maintain a Public Trust clearance and successfully pass a thorough Government background screening process requiring the completion of detailed forms and fingerprinting</li><li>
This position has a U.S. residency requirement. The USPS security clearance process requires the selected candidate to have resided in the U.S. (including U.S. Territories) for the last five years as follows: U.S. Citizens cannot have left the U.S. (including U.S. Territories) for longer than 6 months consecutively in the last 3 years (unless they meet certain exceptions). Non-U.S. Citizens cannot have left the U.S. (including U.S. Territories) for longer than 90 days consecutively in the last 3 years.</li></ul><p>
Location:</p><ul><li>
Remote</li><li>
Morrisville, NC</li><li>
Falls Church, VA</li><li>
Eagan, MN</li></ul><p>
GDIT IS YOUR PLACE:</p><ul><li>
401K with company match</li><li>
Comprehensive health and wellness packages</li><li>
Internal mobility team dedicated to helping you own your career</li><li>
Professional growth opportunities including paid education and certifications</li><li>
Cutting-edge technology you can learn from</li><li>
Rest and recharge with paid vacation and holidays</li></ul><p></p><p>
#zxc726</p>
</div></div><div><div><div><p>Work Requirements</p></div></div><div></div><div><div>
Years of Experience<div>
10 + years of related experience</div><ul><li>may vary based on technical training, certification(s), <i>or</i> degree</li></ul></div><div></div><div>
Certification</div><p></p><div>
Travel Required<div>
Less than 10%</div></div></div></div></div><div><p>
Salary and Benefit Information</p><div>
The likely salary range for this position is $147,292 - $199,278. This is not, however, a guarantee of compensation or salary. Rather, salary will be set based on experience, geographic location and possibly contractual requirements and could fall outside of this range.<br>
View information about benefits and our total rewards program.</div><p>
About Our Work</p><div>
We are GDIT. A global technology and professional services company that delivers technology and mission services to every major agency across the U.S. government, defense and intelligence community. Our 26,000 experts extract the power of technology to create immediate value and deliver solutions at the edge of innovation. We operate across over 50 countries worldwide, offering leading capabilities in digital modernization, AI/ML, cloud, cyber and application development. Together with our customers, we strive to create a safer, smarter world by harnessing the power of deep expertise and advanced technology.</div><div>
Join our Talent Community to stay up to date on our career opportunities and events at gdit.com/tc.</div><div><i>
Equal Opportunity Employer / Individuals with Disabilities / Protected Veterans</i></div></div></div>

Senior Cloud Security Architect

Search 8831+ Security architect jobs near you this May. New roles added regularly across leading industries. Apply today.

8831 security architect jobs Near Me

AI Security Architect

AI Security Architect

Cloud Security Architect

Identity Security Architect

Application Security Architect

Physical Security Architect

Senior Cloud Security Architect