Cyber Security Architect

Alderson Loop is seeking a Cybersecurity Architect / Security Assessment Consultant to support a large enterprise organization in the energy and utilities industry. This individual will be responsible for reviewing proposed technology solutions, evaluating cybersecurity risks, and recommending appropriate security controls to ensure alignment with enterprise security standards and best practices.

The ideal candidate will have a strong background in network security, cybersecurity architecture, and technical risk assessments. We’re open to candidates with backgrounds in cybersecurity engineering, security consulting, or architecture who have experience evaluating enterprise technologies and communicating security risks to both technical and business stakeholders., * 5+ years of experience in cybersecurity, including approximately 4-5 years of exposure to security architecture, architecture reviews, or technical security assessments. \n

• Strong understanding of enterprise network security, including firewalls, network segmentation, access controls, network protocols, and security best practices. \n

• Experience reviewing proposed technology solutions, identifying security vulnerabilities or control gaps, and recommending remediation strategies. \n

• Knowledge of cloud security concepts and environments such as AWS, Azure, or GCP. \n

• Familiarity with cybersecurity risk management methodologies and frameworks such as NIST, ISO 27001, or CIS Controls. \n

• Strong communication skills with the ability to translate technical security findings into actionable business recommendations. \n

• Ability to work independently and collaborate with cross-functional technical and business teams. \n, * Previous experience supporting large enterprise environments, particularly within energy, utilities, or other regulated industries. \n

• Experience with Zero Trust, identity and access management, vulnerability management, and enterprise security controls. \n

• Exposure to operational technology (OT), industrial control systems (ICS), or critical infrastructure environments. \n

• Experience conducting security assessments across a broad range of enterprise technologies and platforms. \n

n \n

• Review proposed technology solutions and architectures across enterprise networks, cloud environments, infrastructure, and business applications to identify potential security risks. \n

• Conduct cybersecurity architecture assessments, evaluate existing security controls, and recommend appropriate mitigation strategies. \n

• Assess solutions against established security standards, frameworks, and industry best practices. \n

• Document security findings, assign risk ratings, and provide actionable recommendations to address identified gaps. \n

• Collaborate with infrastructure, networking, cloud, application, and business teams to evaluate new technologies and proposed implementations. \n

• Communicate technical security risks and recommendations clearly to technical teams, business stakeholders, and leadership. \n

• Support risk acceptance discussions and ensure appropriate documentation of identified security risks. \n

\n

\n