Security Architect

We're on the hunt for a Security Architect to join our ranks. In this capacity, you'll support our client, a prominent name in entertainment and technology, as they assume ownership of, enhance, run, and maintain their company-wide Vulnerability Management (VM) initiative. You'll work in close coordination with VM stakeholders within InfoSec, along with online service producers, the IT division, the AWS group, the Networking team, and the Patching function covering Windows, Linux, and Mac systems You'll also team up with the Security Engineering group, who will contribute to the technical design of the VM program and carry out implementation under the guidance of the VM manager. This initiative will cover expanding vulnerability scan reach, refining scanning methods, reworking scan policies, calibrating security tooling, and related efforts Responsibilities Leverage solid business acumen to frame conversations in business terms, converting technical risk into language leadership can act on Spearhead upgrades to security platforms while enabling their transition into cloud environments Calibrate security scanning tools to boost both the breadth of coverage and overall scan efficiency Push forward automation efforts for recurring security tasks to enhance both speed and consistency Architect VM workflows that integrate smoothly with existing corporate systems and processes Cross-reference vulnerabilities reported by vendors against Nexpose data, looping in the patching team as needed Plan ahead for scanning infrastructure capacity needs to keep the program scalable over time Assess discovered vulnerabilities and rank them by urgency, factoring in business impact and system importance Interpret findings surfaced through SAST and triage them appropriately according to associated risk Sync up with service owners and other stakeholders on any proposed modifications or updates Track team output and monitor program progress against established KPI benchmarks Manage streamlined, clear communication of reporting up to InfoSec leadership Refresh current runbooks and author new documentation to keep operations well-supported Collect both functional and non-functional requirements for VM tooling, run proof-of-concept testing, and put forward recommendations Shape a forward-looking VM program that reflects the client's specific business context alongside industry-standard security practices Lead the rollout of the next-generation VM program, carrying it from initial vision through to complete execution Report on a direct basis to the InfoSec head or CISO Requirements At least 8 years of applicable background working on security-focused projects A minimum of 3 years spent in Senior, Lead, Manager, or Owner-level capacities Demonstrated history managing engagements involving teams of 20 or more full-time staff Background using at least one vulnerability management platform, such as Nexpose or Qualys Hands-on background in offensive security disciplines Experience contributing to application and infrastructure security initiatives Background participating in or managing bug bounty programs Experience producing documentation intended for client audiences Capability in scripting, including reading existing code and defining technical specifications Strong command of Python, Bash, and PowerShell Previous background administering both Windows and Linux systems Solid grasp of networking fundamentals, including VLAN trunking and TCP/IP concepts Professional proficiency in English (C1) and a proactive, accountable approach to problem-solving Nice to have Background functioning as a DevOps or Security Engineer within AWS cloud infrastructure Working knowledge of AWS tools including CloudTrail, CloudWatch, Config, Lambda, GuardDuty, Inspector, SSM, EKS, and Fargate Background managing and integrating Cloud Security Posture Management (CSPM) platforms Experience working with Static Application Security Testing (SAST) tooling Relevant certification, which would be considered a valuable addition to your qualifications