Cyber Security Architect

Alderson Loop is seeking a Cybersecurity Architect to support a large enterprise organization in the energy and utilities industry. This individual will be responsible for independently reviewing proposed technology architectures, identifying cybersecurity risks, and recommending appropriate security controls to ensure alignment with enterprise security standards and best practices.

The ideal candidate will have strong technical fundamentals in network security, threat modeling, and enterprise security architecture assessments. We’re open to experienced cybersecurity engineers, security consultants, and architects who can independently evaluate complex technology solutions, identify vulnerabilities, and clearly communicate security risks and recommendations to technical and business stakeholders., * 5+ years of cybersecurity experience, including substantial hands-on experience with security architecture reviews, technical security assessments, or security engineering. \n

• Strong networking fundamentals, including TCP/IP, network protocols, stateful vs. stateless firewalls, network segmentation, routing, and enterprise connectivity. \n

• Practical experience with threat modeling methodologies, such as STRIDE, PASTA, MITRE ATT&CK, or similar frameworks, and the ability to explain how they’ve been applied. \n

• Experience independently evaluating proposed technology architectures, identifying security risks, and recommending appropriate controls and mitigation strategies. \n

• Strong understanding of enterprise security controls, including firewalls, IAM, Zero Trust, encryption, and network security. \n

• Knowledge of cloud security concepts and environments such as AWS, Azure, or GCP. \n

• Experience documenting security findings, assessing risk severity, and communicating remediation recommendations. \n

• Familiarity with cybersecurity frameworks such as NIST, ISO 27001, and CIS Controls. \n

• Strong communication skills and the ability to clearly explain technical concepts, security risks, and business impact to stakeholders. \n

• Ability to work independently, manage competing priorities, and deliver security assessments within established timelines. \n

• Independently review proposed technology solutions and architectures across enterprise networks, cloud environments, infrastructure, and business applications. \n

• Conduct security architecture assessments, identify vulnerabilities and control gaps, and recommend appropriate mitigation strategies. \n

• Perform threat modeling using established methodologies and frameworks to identify potential attack vectors and security risks. \n

• Evaluate network security designs, including firewalls, segmentation, connectivity, access controls, and network protocols. \n

• Assess proposed solutions against security frameworks and standards such as NIST, ISO 27001, and CIS Controls. \n

• Document security findings, assign risk severity ratings, and provide actionable remediation recommendations. \n

• Collaborate with networking, infrastructure, cloud, application, and business teams to evaluate proposed implementations and communicate security risks. \n

\n

\n, n \n

• CISSP, CISM, CCSP, CCNA, or other relevant cybersecurity certifications. \n

• Experience supporting large enterprise environments, particularly within energy, utilities, financial services, or other regulated industries. \n

• Experience assessing third-party integrations, cloud architectures, SaaS applications, and enterprise infrastructure. \n

• Background in cybersecurity consulting, security engineering, or enterprise security architecture. \n

• Exposure to operational technology (OT), industrial control systems (ICS), or critical infrastructure environments. \n