[Hiring] Security Architect @ExecRecruitment

Role Description

• Primarily assist in the planning, design, development, deployment, administration and operational support of enterprise security automations and custom security tools, including:
  • Python-based automations, internal web applications, APIs, SDKs, scripts, dashboards, command-line utilities and system integrations
  • Automated workflows for alert enrichment, triage, incident response, case management, notifications, containment, escalation and reporting
  • Custom tools to assist with CVE vetting, vulnerability enrichment, prioritization, tracking and security decision support
• Secondarily assist in the planning, design, deployment and operational support of a broad range of security platforms, including:
  • DSPM, ASM, IAM, vulnerability management, email security, endpoint security, SIEM, XDR, SOAR, logging, monitoring, network security, cloud security and threat intelligence technologies
  • Integrations with ticketing, case management, notification, identity, data sources, APIs, SDKs and other enterprise systems as needed
  • Support for technologies such as Palo Alto Networks, Proofpoint, Tenable, Cribl, WhatsUp Gold and other current or future security products
• Develop, test, deploy and maintain automated security workflows, applications and scripts using Python, PowerShell, Bash, REST APIs, JSON, YAML, vendor SDKs and other appropriate technologies.
• Assist with identity and access management functions, including:
  • User provisioning, deprovisioning, access reviews, role-based access control, service accounts, API credentials, authentication, authorization and identity-based system integrations
• Deploy, configure, patch, monitor, optimize and troubleshoot Linux systems supporting security sensors, collectors, connectors, applications, containers and data-processing services, including Docker-based environments.
• Support security architects, engineers, SOC analysts, incident responders and agency customers through:
  • Platform troubleshooting, automation development, system integration, technical escalation, knowledge transfer and operational handoffs
• Monitor and report on:
  • Automation health, application availability, system performance, sensor status, integration failures, API errors, vulnerability status, platform issues and other security engineering and operational metrics
• Ensure high availability, resilience, backup, recovery, patching, lifecycle management, secure configuration and controlled change processes for:
  • Security tools, Linux systems, applications, automations and supporting services
• Collaborate with security architects, engineers, analysts, incident responders and agency stakeholders to align solutions with:
  • Business goals, industry-standard frameworks, regulatory requirements and organizational risk tolerance

Qualifications

• Broad hands-on security engineering experience supporting multiple cybersecurity technologies, systems, integrations and operational functions.
• Experience integrating enterprise technologies using APIs, SDKs, web services, structured data formats, authentication methods and vendor-supported interfaces.
• Strong experience troubleshooting complex technical issues across applications, security platforms, operating systems, networks, identity services and integrations.
• Linux system deployment, configuration, patching, scripting, service management, monitoring, troubleshooting and lifecycle management.
• Experience developing automation and response workflows using Python, PowerShell, Bash, REST APIs, JSON, YAML and vendor SDKs.
• Experience supporting IAM, DSPM, ASM, vulnerability management, email security, endpoint security, SIEM, SOAR, logging, monitoring, cloud security and other enterprise security technologies.
• Strong understanding of enterprise security architecture, incident response, networking, access control, secure software development, systems administration and industry-standard cybersecurity frameworks.

Requirements

• Bachelor's degree in an Information Technology, Computer Science, Software Engineering or Information Security related field.
• Eight years of relevant work experience (experience may be substituted in lieu of education).
• Five years of experience in supporting large IT environments, security systems, software development and/or system deployments.

Preferred Skills

• Hands-on experience serving as a security engineering generalist in a large, multi-tenant, shared-services or managed-service environment.
• Hands-on Linux, Docker, security sensor, monitoring, scripting and platform administration experience.
• Experience supporting SOC analysts, security engineers, incident responders, agency customers and rapidly changing operational priorities.
• Familiarity with Palo Alto Networks, Proofpoint, Tenable, Cribl, WUG or other enterprise security technologies and experience developing playbooks, runbooks, procedures and technical documentation.

Preferred Certifications

• CISSP, Security+, GIAC or other relevant cybersecurity certification.
• Linux, Python, Cloud, IAM or other relevant security engineering or platform certification.

Benefits

• Long-Term Stability: Join us on a multi-year opportunities with room to grow.
• Comprehensive Health Coverage: Access quality healthcare benefits to keep you and your family well.
• Future Planning: Enroll in our 401(k) program and invest in your financial security.
• GC Assistance: We support immediate Green Card processing, if required.