Cyber Risk & Security Architect

We are looking for a Cyber Risk & Security Architect to assess and improve a client’s security posture across on-premises, Azure, and AWS environments. The client needs someone who can look across the cybersecurity ecosystem, identify gaps and risks, and then get hands-on helping implement and validate improvements. This person will focus heavily on security operations, detection engineering, MITRE ATT&CK, logging/telemetry, cloud security, segmentation, and security monitoring. They should understand both the big-picture security architecture and the technical details needed to actually improve the environment.

Day-to-Day Assess security operations, detection engineering, telemetry, logging, alerting, and response readiness. Evaluate coverage against relevant MITRE ATT&CK techniques and identify material detection or visibility gaps. Assess cloud and infrastructure security boundaries across on-premises, Azure, and AWS. Review segmentation, administrative paths, security monitoring, and key infrastructure dependencies. Develop and, where authorized, help validate targeted improvements that materially reduce exposure.

5-6+ years of consulting experience, ideally Big 4 or similar hands-on cybersecurity consulting. Security operations, detection engineering, infrastructure security, or cloud-security assessment experience. Practical MITRE ATT&CK mapping and detection-gap analysis experience. Strong Azure and AWS security assessment knowledge plus understanding of on-premises infrastructure and segmentation. Experience evaluating logging, telemetry, security monitoring, and operational response dependencies. Ability to work at both architectural and technical-detail levels and communicate priority findings clearly. Big 4 cybersecurity consulting background. Experience with Defender XDR. CSPM/CNAPP experience. Experience with open-source or open assessment tooling. Experience working within financial services or another highly regulated industry. Broader information security operating model / InfoSec experience.