Senior Security Architect

Aquent is proud to partner with a leading financial technology company dedicated to building secure and innovative products and services for its members and customers. This organization is at the forefront of deploying robust product security practices, compliance frameworks, and design patterns, collaborating across engineering, product, and design teams to ensure the highest security standards and regulatory adherence.

Are you ready to be a pivotal force in shaping the security landscape of cutting-edge platforms and products? We are seeking a visionary architect to drive the end-to-end security of our digital ecosystem. In this role, you will be instrumental in making critical security decisions, leading initiatives that directly support our business objectives, and ensuring our members' trust through unparalleled security. Your expertise will not only protect our innovative offerings but also empower their growth, making a tangible impact on our mission to redefine financial services.

What You'll Do

* Champion cybersecurity architecture, effectively translating complex security concepts for product and engineering teams.

* Integrate new and existing security tools, standards, and processes seamlessly into the development lifecycle.

* Provide expert guidance on the secure design of product and application architecture, articulating security requirements through well-defined user stories, initiatives, and epics.

* Conduct thorough security design reviews and threat modeling for both infrastructure and application projects.

* Perform security reviews and assessments of critical applications and platforms to identify vulnerabilities and ensure compliance with security standards.

* Review and secure APIs, ensuring robust authentication, authorization, and data validation mechanisms.

* Collaborate closely with development teams, offering security-specific feedback on new features.

* Analyze and evaluate evolving cloud security trends and vulnerabilities, providing continuous feedback for best practices.

* Develop comprehensive security test plans for new products and design scalable security solution blueprints.

* Automate security checklists and implement "security as code" leveraging cloud services and continuous integration/continuous delivery (CI/CD) components.

* Conduct continuous threat modeling for new features and product offerings within an agile delivery environment.

* Perform business-level security architecture assessments to evaluate existing security programs and cloud application architectures, identifying weaknesses and recommending improvements.

* Partner with risk and compliance teams, contributing to security risk impact assessments and shaping information security policies, standards, and guidelines.

* Work with engineering teams to ensure application security risks are effectively identified using market-leading tools and appropriately addressed, balancing security with usability.

* Architect, design, prioritize, coordinate, and communicate the necessary security technologies to maintain a highly secure yet user-friendly computing environment.

What You'll Need

* Strong understanding of cloud services, major cloud platforms, AI Security, SaaS security, and the Well-Architected Framework security pillar.

* Experience with threat modeling or other risk identification techniques.

* Proven experience conducting architecture reviews to identify and evaluate application and infrastructure security risks.

* Deep understanding of containerization technologies like Docker, orchestration platforms such as Kubernetes, and CI/CD pipelines.

* Knowledge of network and web-related protocols (e.g., TCP/IP, UDP, IPSEC, HTTP, HTTPS, routing protocols).

* Expertise in Identity and Access Management, including authentication and authorization protocols like OIDC, OAuth2.0, and SAML.

* Proficiency in web application security, microservices, and API design patterns.

* Experience with service mesh concepts, microsegmentation, and network security.

* Familiarity with cryptographic protocols and standards for data encryption.

* Demonstrated knowledge of the threat landscape, security threat and vulnerability management, and security monitoring and analytics.

* Ability to prioritize and manage multiple work streams effectively.

* Excellent written and verbal communication skills for conveying complex security concepts and solutions.

* Understanding of secure software development lifecycle principles and "Shift Left" methodologies.

Preferred Qualifications

* Bachelor's degree in Computer Science or equivalent from a fully-accredited college or university.

* 8+ years of experience in infrastructure and product security architecture.

* Experience with cloud-native products and an in-depth understanding of microservice topologies and implementations.

* 8+ years of experience with cloud technologies.

* Demonstrated ability to think strategically about business, product, and technical challenges.

* Proven ability to work with compliance frameworks and requirements such as PCI, GLBA, HIPAA, GDPR, SOX, etc.

* Ability to manage relationships with other business units, external vendors, and stakeholders when IT security risks are present and system or process changes are required to mitigate risk.

* Familiarity with major cloud platforms and at-scale services.

* Ability to thrive in a fast-paced and Agile development environment.

* A collaborative spirit, essential for success in a team-oriented environment.

Nice to Have

* CISSP, CISM, or GSEC certification.

* Master's or PhD in Computer Science or Engineering.

* Experience in the financial services industry.

**About Aquent Talent**

Aquent Talent connects the best talent in marketing, creative, and design with the world's biggest brands.

Our eligible talent get access to amazing benefits like subsidized health, vision, and dental plans, paid sick leave, and retirement plans with a match.

Aquent is an equal-opportunity employer. We evaluate qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, veteran status, and other legally protected characteristics. We're about creating an inclusive environment-one where different backgrounds, experiences, and perspectives are valued, and everyone can contribute, grow their careers, and thrive.

#LI-JR1