Security Architect

As a Security Architect in the Cybersecurity M&A team, you will secure our platform, applications, operations and product use through security reviews and threat mitigation.

You must be an advanced generative AI user, applying AI harnesses, automated workflows and engineering integrations,not just conversational chat.

Responsibilities

• Conduct in-depth security assessments and threat modelling across AWS, EKS, web applications and APIs to identify vulnerabilities and recommend mitigations.
• Design and implement security architectures for cloud environments, with a focus on AWS and Kubernetes (EKS).
• Partner with DevOps and software development teams to embed security practices in CI/CD pipelines and throughout the development lifecycle.
• Develop and refine security policies and procedures to strengthen protection and support compliance.
• Assess emerging security threats, tools and methodologies to inform strategic recommendations.
• Provide technical guidance and training to internal teams to strengthen security awareness and practices.

Requirements

• Experience leading security architecture reviews and threat modelling using industry standards.
• Experience designing security controls for SaaS applications and backend services across API gateways, identity and access management, data protection, and SIEM-based security monitoring.
• Familiarity with OWASP Top 10 and CWE Top 25 vulnerabilities.
• Direct experience with, or a strong understanding of, SaaS, PaaS and IaaS services and their security considerations.
• Understanding of secure development lifecycle methodologies and Agile practices.
• Working knowledge of middleware and development platforms such as Java, C# and .NET.
• Technical proficiency in at least one programming language, and the ability to successfully complete a coding assessment as part of the selection process.
• Hands-on penetration testing experience is a strong advantage.
• Practical experience with intrusion detection/prevention, firewalls, antivirus, policy enforcement, configuration management, security monitoring, audit or secure application development.
• Advanced hands-on use of AI harnesses, automated workflows and engineering integrations beyond conversational chat.
• Experience supporting mergers and acquisitions before or after deal completion is a plus.
• Experience working with or supporting cross-functional teams, including cybersecurity, engineering, penetration testing and operations.
• Strong written and verbal skills, including documenting findings and communicating with technical and non-technical stakeholders.
• Industry certifications such as CISSP, GIAC or OSCP, or a strong willingness to pursue them.