Security Architect

We are looking for an experienced Security Architect to design and lead the development of robust security architectures for complex environments across both cloud infrastructure and applications. 

The ideal candidate will have a strategic mindset, a deep understanding of security principles, and the ability to act as a trusted advisor to clients and internal teams. 

This is an exciting opportunity to shape and lead security architecture for cutting-edge, large-scale projects. 

Responsibilities

• Design secure architectures for cloud infrastructure and applications, adhering to best practices and business goals to achieve scalable, resilient and secure solutions.
• Conduct comprehensive risk assessments and threat analysis, identifying vulnerabilities and suggesting security improvements tailored to the organization's profile, infrastructure and data.
• Ensuring security architectures comply with relevant regulations, such as Privacy Protection Regulations and Proper Conduct of Banking Business Directives.
• Collaborate with development teams to design secure software architectures and integrate security throughout the software development lifecycle (SDLC), focusing on threat modeling, secure coding practices, and architecture reviews.
• Evaluate and integrate security technologies, ensuring they meet organizational needs and align with best practices.
• Communicate complex security concepts clearly to stakeholders, offering actionable insights and recommendations.
• Stay current with emerging technologies and methodologies to continuously enhance service quality.

Qualifications

• 5+ years of experience in cybersecurity, with a minimum of 2 years hands-on experience in either cloud security or application security.
• Strong architectural knowledge AWS-based cloud platforms, with the ability to design secure cloud-native solutions.
• Demonstrated experience in designing and implementing security for containerized applications and Kubernetes clusters. 
• In-depth understanding of secure application design, threat modeling, and secure development practices, with experience advising on security integration within software architectures.
• Familiarity with DevSecOps practices and security integration in CI/CD pipelines, with the ability to advise on the implementation of security tools (e.g., SAST, DAST, container security).
• Ability to think strategically about security, balancing business objectives with security risks, and designing long-term security roadmaps and strategies.
• Proven experience acting as a trusted advisor to both internal teams and external customers, helping translate security requirements into actionable strategies.
• Security certifications such as CISSP, CISM, AWS Certified Security Specialty - advantage.