63 applicants

Company

Lyric - Clarity in motion. · 4 days ago

Principal Enterprise Security Architect

United States

Full-time

Remote

Lead/Staff

$143K/yr - $215K/yr

10+ years exp

Maximize your interview chances

BillingConsulting

Insider Connection @Lyric - Clarity in motion.

Discover valuable connections within the company who might provide insights and potential referrals.
Get 3x more responses when you reach out via email instead of LinkedIn.

Responsibilities

Actively participate in various business and enterprise architecture forums to champion cloud security interests and provide expertise on security-related issues

Create and maintain security strategy plans and roadmaps; influence the planning and execution of the roadmap with measurable benchmarks to show progress (or deficiencies requiring additional attention)

Develop and maintain Security Architecture processes and artifacts that enable the enterprise to implement security capabilities that are aligned with the business, technology, and threat drivers

Serve as the subject matter expert in secure cloud technology design, development, and implementation in support of products, solutions, and business functionality enablement

Establish architecture design principles and practices to improve performance, effectiveness, security, compliance, and scalability of solutions

Partner with cross-functional teams to assess cloud security risks by establishing security architecture with a focus on threat detection, security control enforcement, and incident response

Understand the offerings within Amazon Web Services (AWS) as well as other leading cloud service providers

Based on business requirements, plan and design cloud-native architecture that adheres to cloud security frameworks, standards, and best practices

Determine baseline security configuration standards for operating systems (e.g., OS Hardening), network segmentation, web application firewall, mobile devices, etc.

Review security technologies, tools, and services, and make recommendations to the broader security team for their use, based on security policy and procedures

Qualification

Find out how your skills align with this job's requirements. If anything seems off, you can easily click on the tags to select or unselect skills to reflect your actual expertise.

Security ArchitectureAmazon Web Services (AWS)Microsoft AzureAccess Management (IAM)Cloud SecurityCISSPCISACISMCCSPAWS Security CertificationSaaSIaaSPaaSNIST Security FrameworkHITRUST StandardsMitre Att@ck FrameworkCIS BenchmarksData ProtectionCryptographyNetwork SecuritySecurity InformationEvent Management (SIEM)Intrusion Detection/Prevention Systems (IDS/IPS)Public Key Infrastructure (PKI)Endpoint DetectionResponse (EDR)Threat Intelligence PlatformsSecurity AutomationOrchestrationDeception Technologies

Required

10+ years of experience with hands-on security architecture and/or engineering

5+ years of experience with Amazon Web Services (AWS) and Microsoft (MS) Azure

Preferred

Bachelors Degree

CISSP, CISA, CISM, CCSP, or other relevant security-related designation(s)

AWS Security Certification

AWS Solutions Architect Certifications

Experience with SaaS, IaaS, and PaaS architectural solutions within Amazon Web Services, Microsoft Azure, and other cloud providers

Experience in Cloud, DevSecOps, Container Security, IAM patterns, WAF/CDN/DDoS services, security and governance tools, cloud access security brokers (CASBs), and server virtualization technologies

Experience in security architecture methodologies like NIST security framework and HITRUST standards, best practices like Mitre Att@ck framework, CIS benchmarks, and defense-in-depth

Experience with data protection, cryptography, key management, identity, and access management (IAM), network security within SaaS, IaaS, PaaS, and other cloud environments

Experience working with cloud security and governance tools, cloud access security brokers (CASBs), and server virtualization technologies

Broad knowledge of traditional security controls and technologies, such as Security Information and Event Management (SIEM) systems, intrusion detection/prevention systems (IDS/IPS), public key infrastructure (PKI), antivirus and firewalls, in addition to newer offerings such as endpoint detection and response (EDR), threat intelligence platforms, security automation and orchestration, deception technologies, and application controls

Experience architecting SIEM systems, threat intelligence platforms, security automation and orchestration solutions, IDS/IPS, file integrity monitoring (FIM), data loss prevention (DLP), and other network and system monitoring tools