Security Architect

We are looking for a Security Architect to join our team. The role is to support our client, a leading entertainment and technology company, in taking over, improving, operating, and supporting the corporate-wide Vulnerability Management (VM) program. The candidate will closely work with VM stakeholders (InfoSec) as well as online service producers, the IT team, the AWS team, the Network team, and the Patching team (Windows, Linux, Mac) The candidate will work together with the Security Engineering team that will assist in VM program technical design and implement it under the VM manager's supervision. The VM program will include vulnerability scan coverage expansion, scan improvements, scan policy adjustments/refactoring, security products tuning, and more Responsibilities Apply strong business acumen to communicate in business terms and translate technical risk into business risk for leadership Lead the upgrade of security platforms and support their migration to the cloud Fine-tune security scanners to improve both coverage quality and scan performance Drive automation of repeatable security activities to improve efficiency and consistency Design VM processes and integrate them with other corporate tools and workflows Map vendor-identified vulnerabilities against Nexpose findings and coordinate with the patching team accordingly Conduct capacity planning for vulnerability scanning infrastructure to ensure scalability Review identified vulnerabilities and assign priority levels based on business impact and system criticality Understand SAST-identified vulnerabilities and effectively triage them based on risk Coordinate proposed changes and updates with service owners and relevant stakeholders Measure team performance and track program implementation against defined KPIs Coordinate clear, efficient reporting to InfoSec leadership Update existing runbooks and create new documentation to support ongoing operations Gather functional and non-functional requirements for VM tools, conduct proofs of concept, and develop recommendations Design a next-generation VM program tailored to the client's business needs and aligned with security best practices and standards Drive execution of the next-generation VM program from initial concept through full implementation Report directly to the InfoSec head or CISO Requirements A minimum of 5 years of relevant experience on security-related projects At least 2 years in Senior, Lead, Manager, or Owner-level roles Proven track record managing engagements for teams of 5 or more full-time employees Experience with one or more vulnerability management tools, such as Nexpose or Qualys Background in offensive security practices Experience supporting application and infrastructure security programs Experience working with bug bounty programs Background creating client-facing documentation Experience with scripting, including the ability to read code and define technical requirements Proficiency in Python, Bash, and PowerShell Prior experience in system administration across Windows and Linux environments General networking knowledge, including VLAN trunking and TCP/IP fundamentals Professional proficiency in English (C1) and a proactive, accountable approach to problem-solving Nice to have Experience working as a DevOps or Security Engineer within AWS cloud environments Familiarity with AWS services such as CloudTrail, CloudWatch, Config, Lambda, GuardDuty, Inspector, SSM, EKS, and Fargate Experience operating and integrating Cloud Security Posture Management (CSPM) solutions Background working with Static Application Security Testing (SAST) tools Relevant certification, which would be considered a valuable addition to your qualification