Associate Security Architect — SAR & Risk Patterns

Caesars Entertainment; Reno (NV); On-site; USD 120,000 - 155,000; Full time

Job summary

Caesars Entertainment is seeking an Associate Security Architect to support Security Architecture Reviews (SARs) and Business Impact Assessments (BIAs). You will help maintain the ESAF pattern library and grow into an advisory role under senior architects, perfect for someone with a security-analyst, GRC, SOC, or solution-engineering background.

You will collaborate with solution and infrastructure teams, help triage requests, and contribute to risk documentation while staying within governance

Qualifications

• 1–3 years in a security-adjacent role (security analyst, GRC, SOC, IT audit, or solution/security engineering).
• Working knowledge of core security domains: IAM, network, cloud, application, and data security.
• Familiarity with at least one threat-modeling approach (e.g., STRIDE) or the MITRE ATT&CK framework.
• Awareness of regulatory frameworks relevant to gaming/hospitality: PCI-DSS, SOX, gaming commission requirements, and privacy laws (GDPR/CCPA).
• Strong written communication — the role’s output is reviews, assessments, and documentation others must act on.

Responsibilities

• SAR support: intake and triage requests, draft notes, map controls to ESAF patterns, and track implementation.
• Risk assessment support: assist BIAs and risk categorization under senior review.
• Maintain ESAF security patterns, reference architectures, and control libraries across domains.
• Participate in weekly architecture reviews, monthly pattern updates, and knowledge-sharing sessions.

Skills

Security analyst

GRC

Threat modeling

IAM

Tools

AWS Bedrock

Terraform

GitLab CI/CD

HashiCorp Vault

Job description

Caesars Entertainment is seeking an Associate Security Architect to support Security Architecture Reviews (SARs) and Business Impact Assessments (BIAs). You will help maintain the ESAF pattern library and grow into an advisory role under senior architects, perfect for someone with a security-analyst, GRC, SOC, or solution-engineering background.

You will collaborate with solution and infrastructure teams, help triage requests, and contribute to risk documentation while staying within governance