Senior Cybersecurity Architect

We are seeking a Senior Cybersecurity Architect to lead security architecture and engineering across multi-cloud, AI/ML, DevSecOps, and enterprise detection/response to reduce risk at scale. This role will define secure reference architectures, automate controls, and partner with SOC and engineering teams to improve resilience and incident readiness., * Design secure multi-cloud network and workload architectures (segmentation, routing, security controls, and secure connectivity).

• Implement Zero Trust and least-privilege access through strong identity governance and access control patterns (e.g., RBAC/ABAC and entitlement oversight).

• Secure cloud-native services (serverless, containers/Kubernetes, and managed platforms) using hardened configurations, policy enforcement, and monitoring.

• Architect data protection controls for data in transit and at rest, including encryption, key management patterns, and access boundaries.

• Design and mature detection and response capabilities across endpoint, identity, cloud, and SaaS using SIEM/SOAR/EDR/XDR patterns.

• Develop incident management architecture, including playbooks, escalation paths, and automated response actions to reduce MTTD/MTTR.

• Lead or support red/purple team exercises and assessments, translating findings into prioritized remediation and durable architectural fixes.

• Build security automation with scripting and Infrastructure-as-Code to deliver secure-by-default, repeatable deployments.

• Secure AI/ML pipelines, models, and APIs, including whitebox testing against emerging AI attack methods and monitoring for leakage/anomalies.

• Provide security advisory and program leadership by translating technical risk into business impact and driving cross-functional execution.

• 8+ years of cybersecurity engineering/architecture experience delivering enterprise-scale security outcomes.

• Expertise designing secure cloud architectures and identity/IAM controls in at least one major cloud platform.

• Experience designing or operating threat detection and incident response capabilities using SIEM/SOAR/EDR/XDR concepts.

• Strong automation skills using Python/PowerShell/Bash and Infrastructure-as-Code to implement security controls at scale.

• Ability to communicate clearly with engineers and executives and drive alignment across teams through influence. * Experience securing Kubernetes/container ecosystems, including runtime controls, admission/policy enforcement, and supply chain protections.

• Experience securing serverless and event-driven architectures with least-privilege, secrets management, and robust telemetry.

• Hands-on AI security experience, including prompt-injection defenses, model/API protections, and monitoring for exfiltration or unsafe outputs.

• Experience embedding SAST/DAST/SCA and policy-as-code controls into CI/CD and SSDLC workflows.

• API security design experience aligned to OWASP-style best practices and abuse prevention patterns.

• Experience designing enterprise network/remote access security (firewalls, secure gateways, VPN/ZTNA, IDS/IPS) with segmentation.

• Experience integrating threat intelligence into detection pipelines and operationalizing use-cases aligned to ATT&CK-style frameworks.

• Experience securing collaboration platforms (e.g., email, file sharing, chat) with MFA, conditional access, and DLP controls.

• Familiarity with common security frameworks and risk methods (e.g., NIST/ISO-style controls, gap assessments, remediation planning).

• Relevant certifications (security, cloud, IR, or offensive) are a plus.