Cybersecurity Solutions Architect

Job Description

We are seeking a visionary Cybersecurity Solutions Architect to join the Office of the CISO. This crucial role will transform how applications, software, and code are protected, significantly increasing cyber threat resiliency. The ideal candidate will be a technical influencer, leveraging a data and risk-based approach to drive enterprise initiatives and build cross-functional partnerships to deliver modern security solutions.

Roles and Responsibilities

- Transform the way applications, software, and code are protected to increase cyber threat resiliency.
- Use a data and risk-based approach to drive enterprise initiatives, formulate requirements, patterns, and solutions for risk mitigation.
- Act as a technical influencer and build cross-functional partnerships to deliver modern security engineering and operational solutions.
- Partner with the software engineering organization to design software security solutions, participate in proof of concepts, and enable secure, operational delivery.
- Own the software security program and initiatives, reporting on progress to leadership and stakeholders.
- Support the transformation of security engineering into early phases of enterprise delivery through Secure SDLC, Source code management, application security, and DevSecOps.
- Bring an everything-as-code security mindset to applications, APIs, and platform engineering.
- Define technical and business risks along with enterprise requirements for shared-responsibility engineering and operational controls.
- Be a transformation agent by advocating for modern secure engineering principles and automation.
- Mature and modernize the enterprise software security program, using a data-driven approach to identify risks, publish metrics and KPIs, and set enterprise requirements based on cybersecurity frameworks (NIST, Hitrust, CSF, SafeCode, OWASP).
- Contribute to enterprise security policies and standards, and evolve Secure SDLC standards and processes.
- Define, own, and drive the company's software security strategy and roadmap.
- Partner with software and platform engineering teams to promote DevSecOps solutions, establish secure code management practices, improve automated CI/CD pipelines with security services, and automate enterprise security requirements into backlogs.
- Champion cloud application and platform security engineering practices and deliver enterprise security patterns for software engineering.
- Educate and drive engagement of modern secure software principles within the organization.
- Perform design reviews to identify security architecture flaws.

Skills Required

- Experience in software security or related roles.
- Proven track record building and transforming secure software and platform engineering practices.
- Experience building roadmaps and creating initiatives to address enterprise goals.
- Experience partnering with engineering teams to achieve security goals.
- Strong familiarity with source code management and software exploitation techniques (Mitre ATT&CK framework).
- Strong knowledge of cloud platform security (AWS, Azure, Oracle Infrastructure Cloud).
- Strong engineering mindset with software engineering experience.
- Experience implementing pipeline automation and source code management.
- Excellent oral and written communication skills, and effective organizational abilities.
- Additional Standout Skills:
- Hands-on experience with modern engineering technologies such as Kubernetes and Containers.
- Experience with securing Terraform or other IaC (Infrastructure as Code) platforms.
- Delivered secure coding practices to large engineering teams.
- Familiar with API Security.
- Enabling DevSecOps within large organizations.

Education & Certifications Preferred

- Security Architecture TOGAF/SABSA certification.
- Cloud security certifications for OCI, AWS, or Azure (Azure preferred).

---