Senior Security Architect - Azure / Data Centric Architecture - International Organization

NTT DATA Europe & Latam; Valencia; Presencial; EUR 85.000 - 110.000; Jornada completa

Descripción de la vacante

NTT DATA Europe & Latam in Valencia is seeking a Security Architect to work onsite. You will influence, drive, and collaborate with business and technical stakeholders to implement secure by design and privacy by design principles across the organization.

The role requires hands-on security architecture experience, threat modeling, and the ability to translate business requirements into technical controls. You will partner with DevOps to embed security into CI/CD and drive architectural roadmaps.

Formación

• Degree from an accredited university and minimum 7 years in security architecture or red teaming.
• Expertise in at least 4 of Infrastructure, Application, Network, Cloud Security, Identity & Access Management and Security Automation.
• Experience with Azure Cloud and Microsoft 365 security controls, solutions and roadmaps.
• Knowledge of OWASP standards and application security assessment methods (ASVS, MASVS, OWASP Top 10).
• Ability to perform threat modeling using STRIDE, DREAD, MITRE ATT&CK frameworks.
• Experience implementing DEVSECOPS and security automation delivery pipelines (SAST/DAST/SCA).
• Familiarity with cloud landing zones, NSGs/VCNs, conditional access, CI/CD pipelines.
• Strong communication skills and ability to translate business requirements into security controls.

Responsabilidades

• Drive and support the solution architecture development from context to physical architecture and embed security controls in the SDLC.
• Collaborate with stakeholders to identify attributes affecting threat and attack vectors.
• Develop data flows, threat models, and architecture patterns for security baselines.
• Lead threat modeling activities and communicate outcomes to engineering and risk teams.
• Develop roadmaps towards zero trust, automated threat modeling, and policy as code.
• Create security reference architectures and patterns based on technology demand.
• Research new security capabilities for continuous improvement across the organization.
• Publish and maintain the Security Capability Matrix and architecture artifacts.
• Liaise with DevOps to define guardrails for pipelines and secure delivery processes.

Conocimientos

Infrastructure security

Application security

Network security

Cloud security

Identity & Access Management

Security automation

Educación

Bachelor's degree

Herramientas

SAST

DAST

SCA

Container security tooling

DevSecOps tooling

Descripción del empleo

For an International Organization based in Valencia, NTT DATA is currently looking for Security Architect to work onsite. The candidate is expected to influence, drive, and collaborate with business and technical stakeholders to achieve practical architecture solutions that meet the secure by design and privacy by design principles.

Your role:

• Drive and support the solution architecture development process from context to physical architecture and ensure that all relevant security controls are embedded early in the SDLC phase.
• Work with technical and business stakeholders to identify architectural attributes that may influence threat and attack vectors.
• Collaborate with business and technical stakeholders to develop data flows, user profiles, data dictionaries, release notes, technical specification and process flows as input for threat modeling activities.
• Perform threat modeling activities and communicate outcomes to platform engineers, Information Security Risk Management and Application Security team.
• Develop technical road maps towards achieving mid to long term enterprise security architecture goals like zero trust architecture, automated threat modeling, secure by default, policy as code and pattern as code.
• Develop security architecture patterns to address reoccurring security problems.
• Develop security reference architecture documents based on the security technology stack.
• Research new information security capabilities and technology for continuous improvement self and the organization.
• Develop security patterns and security reference architecture documents based on organizational technology demand and knowledge gaps.
• Collaborate with information security assurance team on developing practical and applicable information security baselines and referencing those baselines in Enterprise Security Architecture documentation.
• Drive and document security architecture artifacts for protecting the crown jewels and strictly confidential assets.
• Collaborate with DevOps team to define guardrails and process flows for configuration, development, delivery, and deployment pipelines.
• Update and publish the Security Capability Matrix.
• Familiarize architects and technical stakeholders with architectural artifacts.

Your profile:

• Degree from an accredited university plus a minimum of 7 years of progressive work experience in either security architecture or red teaming.
• Deep and hands-on understanding and expertise in at least 4 of the following 6 areas - Infrastructure, Application, Network, Cloud Security, Identity & Access Management and Security Automation.
• An understanding of Azure Cloud and Microsoft 365 security controls, solutions, and future roadmaps.
• Understanding of application security assessment methods: OWASP Top 10, OWASP Application Security Verification Standard (ASVS), OWASP Mobile Application Security Verification Standard (MASVS), Attack and Defense techniques.
• Understanding and ability to perform threat modeling on a diverse category of architecture (Referencing STRIDE, DREAD, MITRE ATT&CK Frameworks)
• Experience implementing and designing DEVSECOPS and Security Automation delivery pipelines with automation tools like SAST, DAST, SCA, Container Security tooling.
• Familiarity with cloud security concepts like landing zones, Isolation concepts, NSGs/VCNs, conditional access, CI/CD pipelines.
• Familiarity with Datacentric Architectural concepts (Data storage, data lakes, raw and transformational data vaults, data isolation, ETL/ELT ingestion pipelines).
• Ability to operate with a limited level of direct supervision.
• Exercise independence of judgement and autonomy.
• Familiarity with Zachman's abstract architectural concepts.
• Strong critical thinking and problem-solving skills
• Strong written, verbal communication, and interpersonal skills
• Ability to translate business requirements into technical and security control requirements.

Languages:

English is the main working language.

NTT DATA is a global consultancy company, employing over 17.000 professionals world-wide. Within the International Institutions we have framework contracts with European Institutions like: European Commission; European Parliament; European Court of Auditors; Europol; NATO; Court of Justice; EPO; European Council, United Nations, etc.