Principal Security Architect

What you'll do

• Secure APIs by implementing access control mechanisms, OAuth, JWT, and configuring API gateway security.
• Develop reusable security design patterns to ensure consistency across diverse technology stacks and business domains.
• Craft actionable security standards and policies aligned with industry best practices and regulatory requirements.
• Lead the design and innovation of security architectures to protect against evolving threats.
• Conduct threat modeling, risk assessments, and vulnerability management in complex enterprise settings.
• Perform threat analysis using intelligence and analytics to proactively identify and mitigate security risks.
• Secure machine learning models against adversarial attacks and ensure data privacy in AI training sets.
• Implement and oversee a risk management framework to balance security investments with business needs.

What we're looking for

• 3+ years of experience in security architecture and API security, including designing secure API gateways and microservices architectures.
• 8+ years of experience with information security controls, guidelines, and standards such as ISO27000, OWASP, CSA CCM, CIS 20, SOX, and NIST.
• Expertise in cybersecurity frameworks, network security, identity management, encryption, zero-trust architectures, and secure DevOps practices.
• Proficiency in threat modeling, risk assessment, vulnerability management, SIEM implementation, log analysis, and incident response.
• Bachelor's Degree or equivalent years of experience (preferred).
• Technical coding skills in Java, C# .Net, Ruby, and/or Python (preferred).
• In-depth knowledge of AWS core services and infrastructure as code tools like Terraform, CloudFormation, Pulumi, or Ansible (preferred).
• CCSP, CISSP, or GIAC certifications (preferred).