Cybersecurity Architect Job at Teksky LLC in Dallas
Teksky LLC, Dallas, TX, United States, 75215
Job Title: Cybersecurity Architect
Job Overview:
We are seeking a highly skilled and experienced Cybersecurity Architect to join our organization. As a Cybersecurity Architect, you will be responsible for designing, implementing, and maintaining robust cybersecurity systems to protect our organization's IT infrastructure, networks, and data. You will work closely with IT, network, and development teams to assess risks, design security frameworks, and ensure that security best practices are embedded in the architecture of all systems.
Your expertise in identifying vulnerabilities, implementing security controls, and architecting solutions that balance security and business needs will be critical to the organization’s overall cybersecurity strategy.
Key Responsibilities:
Security Architecture Design:
- Lead the design and implementation of the overall cybersecurity architecture for the organization, including both on-premise and cloud environments.
- Develop comprehensive security frameworks, policies, and guidelines aligned with industry standards such as NIST, ISO 27001, GDPR, and CIS.
- Collaborate with IT and development teams to design secure system architectures for new projects, ensuring that security controls are baked in from the ground up.
- Provide guidance on the secure integration of software, network, and hardware components.
Risk Assessment & Vulnerability Management:
- Conduct risk assessments and threat modeling to identify potential security risks within the infrastructure and systems.
- Evaluate and recommend tools, technologies, and approaches to mitigate vulnerabilities and security gaps in current systems.
- Lead the vulnerability management program to ensure continuous monitoring, identification, and remediation of vulnerabilities in both internal and external systems.
Security Standards & Compliance:
- Ensure that all security architectures comply with legal, regulatory, and contractual requirements (e.g., HIPAA, SOX, PCI-DSS, GDPR).
- Stay up to date with the latest developments in cybersecurity threats, industry regulations, and technologies, and adjust the security posture as necessary.
- Oversee audits, assessments, and security tests to ensure compliance with internal security policies and external regulations.
Incident Response & Disaster Recovery:
- Work closely with the incident response team to design, implement, and test disaster recovery and business continuity plans for cybersecurity events.
- Provide leadership in the identification, analysis, and remediation of security incidents, ensuring that all security incidents are logged, investigated, and appropriately mitigated.
Collaboration & Communication:
- Work cross-functionally with other teams (e.g., IT, development, operations, legal) to ensure cybersecurity is fully integrated into the organizational culture.
- Act as a security subject matter expert, providing guidance and training to other teams regarding security architecture, best practices, and risk management.
- Present findings, recommendations, and technical reports to senior leadership and stakeholders to influence security strategy and decision-making.
Technology Evaluation & Implementation:
- Research and recommend the adoption of new security technologies and tools, such as firewalls, intrusion detection/prevention systems, SIEM, VPNs, and endpoint security.
- Lead the implementation of security tools and platforms that support and enhance the security architecture.
Leadership & Mentorship:
- Mentor junior security engineers, guiding them in their technical development and helping them grow in cybersecurity skills and knowledge.
- Lead security-related projects, ensuring alignment with business goals and adherence to timelines and budgets.
Required Skills & Experience:
- Experience:
- 8-12 years of experience in cybersecurity, with at least 5+ years in a hands-on security architect or senior security engineering role.
- Experience in designing and implementing security solutions in large, complex enterprise environments.
- Deep understanding of network security, cloud security, and application security (including AWS, Azure, or Google Cloud).
- Proven expertise in areas such as network defense, penetration testing, security operations, identity and access management (IAM), cryptography, and vulnerability management.
- Technical Skills:
- Proficiency with security architecture tools, such as threat modeling software, firewalls, SIEM systems, IDS/IPS, VPNs, DLP, IAM, etc.
- Hands-on experience with cloud security architecture and securing hybrid cloud environments.
- Expertise in managing security solutions for various systems and platforms, including on-premise, cloud, virtualized environments, and mobile devices.
- Experience with modern authentication and encryption technologies (e.g., OAuth, SAML, PKI, SSL/TLS, etc.).
- Certifications:
- Preferred certifications:
- CISSP (Certified Information Systems Security Professional)
- CISM (Certified Information Security Manager)
- CCSP (Certified Cloud Security Professional)
- CISA (Certified Information Systems Auditor)
- AWS Certified Security – Specialty or Azure Security Engineer Associate (if applicable).
- Soft Skills:
- Excellent communication skills, with the ability to present complex security concepts to non-technical stakeholders.
- Strong leadership and collaboration skills, capable of working with cross-functional teams to drive security initiatives.
- Strong problem-solving abilities and a proactive approach to security risk management.
Preferred Qualifications:
- Education: Bachelor’s degree in Computer Science, Information Security, Engineering, or a related field (Master's degree preferred).
- Experience with DevSecOps: Familiarity with integrating security into CI/CD pipelines, automated security testing, and security for DevOps processes.
- Experience with Security Frameworks: Familiarity with frameworks like NIST Cybersecurity Framework, ISO 27001, CIS Controls, and regulatory standards such as GDPR and PCI DSS.