Senior Cybersecurity Architect

The annual base salary range for this position in California is $175,000 to $205,000 per year. The starting pay for the successful candidate depends on various job-related factors, including but not limited to the candidate’s geographic location, job-related knowledge, skills, experience, education/training, internal value, peer equity, external market demands, and organizational considerations.

We are seeking a highly skilled Senior Cybersecurity Architect to join our organization. Working closely with both the cybersecurity and IT teams, the successful candidate will be responsible for designing, implementing, and maintaining robust cybersecurity solutions to protect our information systems and data. The Senior Cybersecurity Architect must have a deep understanding of information security principles, best practices, and the threat landscape to ensure the security and integrity of our digital assets.

This role combines both architect and engineering responsibilities and reports directly to the Chief Security Officer.

• Design and implement a secure architecture for all digital assets, including cloud and on-premise networks, applications, and data
• Assess current security posture and recommend enhancements to improve overall security
• Conduct risk assessments and vulnerability analyses to identify potential threats and weaknesses
• Conduct vulnerability management and remediation timeline recommendation activities to ensure proper and timely remediation of vulnerabilities in applications and network infrastructure
• Ensure compliance with relevant industry standards and frameworks
• Develop and implement policies, procedures, and controls to mitigate risks
• Perform consistent targeted threat modelling and intelligence to proactively identify threats that may target the organization
• Maintain an incident response plan to handle security breaches and incidents effectively
• Lead incident response efforts, including investigation, containment, eradication, and recovery
• Conduct post-incident analysis to identify root causes and recommend corrective actions

• Monitor network traffic, system logs, and security alerts to detect and respond to potential threats
• Implement and manage security tools and technologies (e.g. Endpoint Detection and Response systems, Security SIEMs, and SOAR utilities)
• Conduct regular security audits and assessments to ensure the effectiveness of security measures

• Collaborate with internal and external stakeholders to ensure cybersecurity requirements are met
• Provide training and awareness programs to educate staff on cybersecurity best practices and policies
• Stay updated on the latest cybersecurity trends, threats, and technologies to improve security posture continuously

• A Bachelor's Degree in Computer Science, Information Technology, Cybersecurity, or a related field
• Master's or advanced degree in Cybersecurity or Information Systems preferred
• At least 10-15 years of experience in cybersecurity, with proven experience as a Cybersecurity Architect or Senior-Level Engineer
• Experience with security tools and technologies (e.g., SIEM, IDS/IPS, firewalls, antivirus, MDM)
• Experience with Microsoft Azure and Entra
• Extensive and proven track record in developing and implementing cybersecurity strategies and solutions
• Relevant certifications such as CISSP, CISM and other advanced cybersecurity credentials are highly preferred
• Certifications in cloud security (e.g., AWS Certified Security Specialty, Microsoft Certified: Azure Security Engineer) are highly preferred
• Familiarity with industry standards (e.g., ISO 27001, NIST, CIS)
• Knowledge of regulatory requirements (e.g., CCPA, HIPAA)
• Knowledge of advanced persistent threats (APTs) and their mitigation techniques
• Knowledge and advanced understanding of firewall, VPN, IDS/IPS, and other network security technologies
• Proficiency in scripting and automation (e.g., Python, Power Shell) is preferred
• Able to create security architectures and frameworks that align with business objectives
• Able to conduct thorough threat modeling and vulnerability assessments
• Able to lead and manage cybersecurity incidents and investigations
• Able to present complex technical information to non-technical stakeholders