Cybersecurity Solution Architect

SoftServe; Poland; On-site; PLN 260,000 - 380,000; Full time

Job summary

SoftServe is seeking a seasoned Cybersecurity Architect to lead security practice efforts across client engagements. You will guide Secure SDLC implementations, craft improvement roadmaps, and drive measurable security outcomes within large enterprise environments.

In this role you will shape cloud-native and container security practices, mentor teams, and align security initiatives with business priorities while communicating with executives. Fluency in English is expected.

Qualifications

• 8+ years of experience in Application Security, DevSecOps or Secure SDLC.
• Ability to lead or mentor a security team and define improvement roadmaps.
• Experience designing Secure SDLC programs at enterprise scale.
• Proficient in building security metrics dashboards for executives.

Responsibilities

• Lead and grow the Cybersecurity Practice as Practice Lead for Secure SDLC.
• Architect and oversee Secure SDLC programs for enterprise clients.
• Define security KPIs and reporting frameworks.
• Drive secure coding adoption and cloud/AI security practices.

Skills

Security architecture

Threat modeling

DevSecOps leadership

CI/CD security

Cloud security

English proficiency

Tools

SAST

DAST

SCA

Secrets scanning

Container security

Kubernetes

Job description

About The Role

As a Cybersecurity Architect, you will help organizations strengthen their security posture and build trust in their digital ecosystems. In this role, you will work closely with clients to assess security challenges, identify improvement opportunities, and design practical solutions tailored to their business needs. You'll guide clients through the entire improvement journey, helping them implement effective security measures, navigate regulatory requirements, and prepare for emerging threats. Working across diverse industries and technologies, you'll apply your expertise to solve complex security challenges and deliver measurable business value. You will have the opportunity to contribute to a wide range of cybersecurity domains, including Security Posture Improvement, Regulatory Compliance & Governance, Data Protection & Privacy, Infrastructure and Application Security, Cloud Security, Cost Optimization & Migration Efficiency, and Secure Adoption of AI technologies. As part of a collaborative team of security experts, you'll stay at the forefront of cybersecurity trends while helping organizations achieve resilience in an ever-evolving threat landscape.

Responsibilities

• Lead and grow the Cybersecurity Practice team, acting as Practice Lead for Secure SDLC and Application Security engagements
• Architect and oversee Secure SDLC programs for enterprise clients
• Assess client security maturity and define improvement roadmaps at a strategic level
• Own the technical direction for embedding security into CI/CD pipelines and engineering workflows across multiple projects
• Establish measurable security KPIs and reporting frameworks for the practice
• Guide clients in adopting risk-based vulnerability management
• Lead threat modeling and secure architecture workshops
• Define secure development standards and guardrails across projects and teams
• Drive developer security adoption and awareness at scale
• Shape and contribute to modern cloud and AI security practices
• Act as a trusted advisor and thought leader in security transformation initiatives
• Lead negotiations with clients to understand business and technical requirements
• Mentor and develop team members, supporting hiring, staffing, and career growth within the practice

Requirements

• A senior security architect with 8+ years of experience in Application Security, DevSecOps, or Secure SDLC implementation, including experience leading or mentoring a team
• An expert in designing and implementing Secure SDLC frameworks at scale across enterprise environments
• Skilled in building and defining security metrics dashboards (KPIs, SLAs, risk visibility, executive reporting)
• Advanced in threat modeling, secure architecture reviews, and design-level security validation
• Deeply hands-on with: SAST, DAST, SCA tools, Secrets scanning, Container and Kubernetes security, Infrastructure-as-Code security, CI/CD security integration
• Experienced in defining and governing: Security gates, Risk-based policies, Governance workflows, Exception and risk acceptance processes
• Fluent in modern cloud-native stacks (microservices, APIs, containers, Kubernetes, public cloud platforms)
• Comfortable reviewing source code in at least one major language (Java, .NET, Node.js, Python, Go)
• Strategic in aligning security architecture and initiatives with business priorities, delivery timelines, compliance requirements, and risk management strategy
• Proven in leading teams, mentoring engineers, and managing practice-level priorities and growth
• Influential in leading discussions with engineering managers, architects, and security leadership
• Fluent in spoken and written English
• Certified with any of OSCP, OSWE, OSEP, OSCE, CREST, eCPPT, eCPTX, eWPT, or eWPT certifications (nice to have)

SoftServe is an equal opportunity employer. Qualified applicants will receive consideration regardless of race, color, ancestry, ethnicity, national origin, religion, sex, sexual orientation, gender identity or expression, age, citizenship, disability, health condition, marital or family status, veteran status, or any other characteristic protected by applicable law.