Senior Security Architect
New
E
EnsonoCybersecurity services
Remote - United StatesFull-TimeSenior
Salary$155,000 to $210,000 annually based on a full-time schedule. In addition to base salary, other compensation programs, depending on eligibility, include an annual bonus plan based on company and individual performance and an equity grant under our Associate Equity Appreciation Program.
Apply NowOpens the employer's application page
Job Details
- Experience
- 8+ years of cybersecurity experience, including significant responsibility for security architecture and the design and review of secure enterprise solutions; 5+ years of cybersecurity experience within a professional services, consulting, or managed services environment.
- Required Skills
- AWSKubernetesMicrosoft Azure
Requirements
- Bachelor’s degree in Computer Science, Information Security, Information Technology, Engineering, Mathematics, or a related field, or equivalent relevant experience.
- 8+ years of cybersecurity experience, including significant security architecture responsibility and design and review of secure enterprise solutions.
- Experience designing and reviewing enterprise security architectures spanning cloud security, identity and access management, Zero Trust, data protection, network security, threat modeling, and secure-by-design principles.
- Experience designing cloud security architectures in Microsoft Azure and/or AWS, including multi-cloud and hybrid-cloud environments.
- Experience designing or governing controls for cloud identity and privileged access, CSPM/CWPP, network segmentation, containers and Kubernetes, serverless, encryption, key and secrets management, cloud logging and monitoring, and infrastructure as code.
- Experience assessing AI/ML and generative AI security, including LLM applications, RAG, AI agents, model APIs, gateways, AI data flows, and third-party AI services.
- Ability to translate business, technology, risk, privacy, and compliance requirements into security architectures, standards, reference patterns, guardrails, and technical requirements.
- Experience with threat modeling and risk analysis, and applying secure SDLC, DevSecOps, defense in depth, least privilege, and security architecture governance.
- Experience applying frameworks and controls including NIST CSF, NIST SP 800-53, NIST SP 800-160, NIST SP 800-207, NIST AI RMF, CSA CCM, CIS Controls and Benchmarks, ISO/IEC 27001, and OWASP guidance.
- 5+ years of cybersecurity experience in professional services, consulting, or managed services, supporting complex enterprise or client environments.
- Experience leading security architecture reviews, identifying risks and controls, documenting residual risk, and presenting recommendations to technical and executive stakeholders.
Responsibilities
- Own and evolve enterprise cloud and AI security principles, roadmaps, reference architectures, reusable design patterns, and technical standards.
- Lead security architecture reviews for solutions, cloud deployments, AI use cases, SaaS platforms, applications, APIs, and third-party integrations.
- Translate business and technical requirements into risk-informed security requirements and designs.
- Design and review secure multi-cloud and hybrid architectures, including identity, privileged access, network segmentation, workload protection, data protection, logging, monitoring, and recovery.
- Define cloud governance guardrails using policy-as-code, infrastructure-as-code security, secure baselines, posture management, and continuous compliance capabilities.
- Define security architecture and requirements for generative AI, machine learning, AI applications, AI agents, and related data flows and integrations.
- Perform threat modeling and abuse-case analysis, documenting threats, attack paths, mitigations, residual risk, and monitoring requirements.
- Partner with application and platform teams to embed security into the SDLC, CI/CD pipelines, cloud landing zones, architecture review gates, and deployment processes.
- Document architecture decisions, control mappings, exceptions, risks, and remediation recommendations, and present options and residual risk to stakeholders.
- Collaborate with Security Operations and Incident Response on telemetry, detection, investigation, containment, and recovery; evaluate technologies and mentor teams.
View Full Description & ApplyYou'll be redirected to the employer's site
