Junior Cybersecurity Architect

CYE is seeking a Junior Cybersecurity Architect (Technical) to join our cybersecurity architecture team and support the evaluation, review, and continuous improvement of security architectures and controls.
In this role, you will collaborate with CISOs and with engineering, cloud, IT, and SOC teams at external customer organizations, working as part of a small and collaborative team.
This position is intended for a candidate with a background in security engineering who is looking to transition into a cybersecurity architecture role. The role focuses on reviewing cloud and SaaS environments, assessing the effectiveness of security controls, and supporting security maturity assessments and mitigation planning activities.
This is a junior‑level architecture role with an emphasis on technical analysis, control review, and security design assessment. The position prioritizes architectural evaluation and advisory activities over hands‑on implementation.
Responsibilities
Perform security maturity assessments, including reviews of technical controls, configurations, and architectural designs, aligned with the NIST CSF 2.0 cybersecurity framework.
Conduct technical configuration and control reviews of cloud environments and SaaS platforms (read‑only / observer role).
Analyze security architectures and technical implementations to identify gaps, risks, and improvement opportunities.
Translate technical findings into clear architectural observations and recommendations.
Produce structured assessment reports and technical findings for both technical and non‑technical audiences.
Maintain internal technical documentation and contribute to architectural knowledge within the team.
Collaborate with R&D and product teams on ad‑hoc cases as a cybersecurity technical subject‑matter contributor.
Qualifications
1–2 years of experience as a security engineer, security operations engineer, or similar technical security role.
Strong understanding of technical security controls and architectures.
Familiarity with:
Cloud identity and access management (e.g., Entra ID / Azure AD).
Microsoft Defender suite, endpoint security, and DLP.
Firewalls, network segmentation, and core network security concepts.
SOC / SIEM concepts and incident response processes.
SaaS security and cloud shared responsibility models.
Ability to analyze configurations and understand architectural/risk implications.
Strong analytical skills and attention to detail.
Clear technical writing and documentation capabilities.
Motivation to grow into an architecture‑focused career path.
About us
CYE’s exposure management platform, Hyver, transforms the way security teams protect their organizations. With CRQ at its core, Hyver reveals exposure in financial terms, visualizes attack routes to critical business assets, and creates tailored mitigation plans. Founded in 2012, CYE has served hundreds of organizations globally.
We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.