Enterprise Endpoint Security Architect

What you'll do

• Lead the architectural design for core enterprise defense capabilities including endpoint protection, EDR, XDR, and application control.
• Manage vulnerability and exposure programs through scanning and continuous threat exposure management (CTEM).
• Design cloud and SaaS security posture strategies using CSPM and SSPM tools.
• Architect messaging and gateway defenses including secure email gateways and authentication protocols like DMARC, DKIM, and SPF.
• Lead network and perimeter defense initiatives involving traffic inspection, data loss prevention, and secure browser technology.
• Develop deception and active defense capabilities such as honeypots, decoys, and canary tokens.
• Establish technical standards and deployment blueprints across on-premises, hybrid, and multi-cloud environments.
• Integrate security telemetry from various tools into SIEM, SOAR, and SOC detection pipelines.

What we're looking for

• You must have a related technical degree.
• You must have 15 or more years of experience in cybersecurity engineering, network security, and infrastructure defense.
• You must have 8 or more years of experience in an enterprise security architect role overseeing multi-domain defense stacks.
• You must have expertise architecting EDR, XDR, and Application Control solutions.
• You must have deep knowledge of CSPM and SSPM tools for cloud and SaaS environments.
• You must be proficient with vulnerability platforms and API-integrated email security tools.
• You must have in-depth knowledge of Secure Web Gateways, SSL/TLS decryption at scale, and secure browsers.
• You must have hands-on experience designing deception environments including honeypots and canary tokens.