Job Description

Position Summary

The Cyber Security Architect is responsible for designing, governing, and continuously improving the organization's cyber security operations architecture. This role provides technical leadership across security monitoring, threat detection, incident response, vulnerability management, threat intelligence, privileged access management, and third-party security assessments. The Architect ensures security technologies are effectively integrated, aligned with business objectives, regulatory requirements, and industry best practices.

Key Responsibilities

• Develop and maintain the Cyber Security Operations architecture roadmap, standards, and reference designs.
• Lead architectural oversight of security monitoring, threat detection, incident response, and threat hunting capabilities.
• Design and optimize integrations across SIEM, NDR, EDR/XDR, email security, vulnerability management, PAM, asset visibility, and threat intelligence platforms.
• Collaborate with Security Operations Center (SOC), Infrastructure, Cloud, Network, and Application teams to improve cyber resilience and security posture.
• Provide technical leadership for incident response, forensic investigations, and cyber risk reduction initiatives.
• Review and approve security architecture requirements for new technologies, software onboarding, vendor solutions, and enterprise projects.
• Lead security assessments, penetration testing remediation programs, and vulnerability management initiatives.
• Develop security controls aligned with NIST CSF, CIS Controls, ISO 27001, and Zero Trust principles.
• Support executive reporting, technology roadmaps, security maturity improvements, and regulatory compliance activities.

Security Platforms & Technologies

• SIEM / Security Monitoring
• CyGlass NDR (Network Detection & Response)
• ThreatDown EDR
• Microsoft Defender Platform
• CrowdStrike Falcon
• Proofpoint Email Security
• Proofpoint Email Defense & TAP
• Armis Asset Intelligence / IoT Security
• Stealthbits PAM / Privileged Access Management
• CyberInt Threat Intelligence Services
• Qualys Vulnerability Management
• Penthera Penetration Testing & Security Assessments

Qualifications

• 12+ years of progressive cyber security experience, including security architecture and security operations.
• Strong expertise in security monitoring, incident response, threat intelligence, vulnerability management, and security engineering.
• Experience architecting enterprise security solutions across cloud, network, endpoint, identity, and email security domains.
• Knowledge of NIST CSF, CIS Controls, ISO 27001, MITRE ATT&CK, Zero Trust, and security best practices.
• Excellent stakeholder management, communication, and technical leadership skills.

Key Outcome: Establish and maintain a resilient, integrated Cyber Security Operations architecture that enables proactive threat detection, rapid incident response, risk reduction, and secure business operations.