Cyber Security Architect

Astreya China; United States; On-site; USD 154,000 - 242,000; Full time

Benefits offered by this job

Medical, dental, vision

401(k) with match

Tuition reimbursement

Paid time off

Paid holidays

Job summary

Astreya is seeking an experienced cybersecurity architect in the United States to lead development and implementation of cybersecurity architectures that integrate AI-enabled capabilities across multiple domains.

The role requires 6+ years in security architecture and a strong background in design, governance, and cross-team collaboration. Expect senior-level responsibilities with enterprise-wide impact and opportunities to drive automated security workflows.

Qualifications

• Minimum 6 years in cybersecurity, IT, architecture or related fields.
• Experience designing enterprise cybersecurity architectures across multiple domains.
• Ability to translate complex technologies into enterprise use cases.

Responsibilities

• Serves as an expert contributor in cybersecurity architectures, patterns, strategies, and solutions.
• Evaluates AI, automation, analytics to enhance cybersecurity capabilities and operating models.
• Develops current-state, transitional, and future-state cybersecurity architectures across domains.
• Assesses opportunities to improve interoperability and automation (Vulnerability & Exposure Management, Security Posture, IAM).
• Assesses architectural considerations for machine identities, AI agents, and privileged access.

Skills

Cybersecurity architecture

AI-enabled security

Cross-domain integration

Security operations integration

Education

Bachelor's degree in Computer Science, Cybersecurity, Information Systems, Engineering, or related field

Job description

Job Responsibilities

• Serves as an expert contributor in the development and implementation of cybersecurity architectures, patterns, strategies, and solutions supporting emerging technology and AI-enabled cybersecurity capabilities.
• Evaluates opportunities to leverage artificial intelligence, agentic AI, automation, orchestration, analytics, and other emerging technologies to enhance cybersecurity capabilities and operating models.
• Develops current-state, transitional, and future-state cybersecurity architectures that integrate capabilities across multiple cybersecurity domains and technology platforms.
• Assesses opportunities to improve interoperability and automation across areas including: Vulnerability and Exposure Management
• Configuration and Security Posture Management
• Identity and Access Management
• Endpoint Protection and Detection
• Security Operations
• Asset and Technology Inventory
• Threat Detection and Response
• Security Analytics and Automation
• Explores how AI agents and autonomous or semi-autonomous capabilities can securely interact with cybersecurity platforms, enterprise systems, data, and workflows while maintaining appropriate security controls, governance, and human oversight.
• Identifies opportunities to reduce fragmented security processes through technology integration, consolidation, automation, and intelligent orchestration.
• Evaluates emerging cybersecurity technologies, platforms, tools, and architectural approaches for potential applicability within the enterprise.
• Develops reference architectures, architecture patterns, capability models, technical recommendations, and roadmaps supporting future cybersecurity capabilities.
• Partners with cybersecurity domain architects, engineering teams, security operations, technology teams, and other stakeholders to evaluate cross-domain architecture requirements and integration opportunities.
• Assesses architectural considerations associated with machine identities, AI agents, privileged access, authentication, authorization, data access, trust boundaries, and automated actions.
• Evaluates security implications associated with integrating AI capabilities into cybersecurity technologies and operational workflows.
• Helps establish architectural principles and guardrails for the responsible and secure adoption of emerging AI-enabled cybersecurity capabilities.
• Identifies dependencies, architectural gaps, integration challenges, technical risks, and opportunities associated with future-state cybersecurity architectures.
• Develops technical assessments, architecture documentation, recommendations, and executive‑level presentations communicating complex concepts to both technical and business stakeholders.
• Proactively monitors technology developments and industry trends that may materially change cybersecurity architecture, operating models, or defensive capabilities.
• Works effectively in an environment involving emerging technologies, ambiguity, experimentation, and rapidly changing technical capabilities.

Education Minimum

• B.S. degree or equivalent work experience in Computer Science, Cybersecurity, Information Systems, Engineering, or another relevant technical field.

Desired

• M.S., M.B.A., or advanced technical degree in Computer Science, Cybersecurity, Engineering, Artificial Intelligence, Information Systems, or equivalent field.

License/Certification Desired

• Certified Information Systems Security Professional (CISSP)
• Certified Information Security Manager (CISM)
• Certified in Risk and Information Systems Control (CRISC)
• Cloud or security architecture certifications
• Vendor-specific security or AI certifications
• Other equivalent cybersecurity, architecture, cloud, or emerging technology certifications

Experience Minimum

• Minimum of 6 years of combined cybersecurity, information technology, architecture, engineering, or related technical experience.
• Demonstrated experience designing, evaluating, or implementing enterprise cybersecurity architectures and solutions.
• Experience working across multiple cybersecurity technology domains rather than exclusively within a single security discipline.
• Experience developing architecture patterns, technical strategies, integration approaches, or future-state technology designs.
• Demonstrated ability to evaluate complex technologies and translate technical capabilities into practical enterprise use cases.
• Experience working with multidisciplinary technical teams including architects, engineers, cybersecurity operations, developers, infrastructure teams, and technology vendors.

Experience Desired

Experience or demonstrated knowledge in the following areas is highly desirable:

• Generative and agentic AI: LLMs, AI agent architectures, and agent-to-system and machine-to-machine interactions
• AI security and governance: secure adoption of emerging AI capabilities
• Enterprise security architecture: reference architectures, design patterns, and defense-in-depth
• Zero Trust architecture: covering network, platform, and identity
• Security platform strategy: integration, technology rationalization and consolidation, capability modeling, and roadmapping
• Vulnerability and exposure management: attack surface management, asset discovery and inventory, and risk prioritization
• Security configuration and posture management: control assessment and configuration baselines
• Identity and access management: authentication, authorization, identity governance, and privileged access management
• Non-human identity management: machine, workload, and AI agent identitiesSecurity operations and detection: endpoint protection, EDR/XDR, SIEM/SOAR, telemetry and analytics, threat detection and response, and automated orchestration

Knowledge, Skills, Abilities & Technical Competencies

• Strong knowledge of cybersecurity architecture, enterprise security technologies, and emerging trends, including how AI and automation are changing architectures and operating models.
• Ability to look past individual products and evaluate security as an integrated ecosystem, including the dependencies across identity, endpoints, infrastructure, applications, data, vulnerability management, security operations, and AI.
• Strong analytical and problem‑solving skills, with the ability to work through complex and ambiguous technical problems.
• Ability to research and assess emerging technologies on your own, including where no established enterprise patterns exist yet.
• Ability to turn emerging concepts into practical architecture patterns, use cases, recommendations, and implementation guidance.
• Sound judgment in telling apart promising capabilities from those not yet mature, secure, or ready for enterprise use.
• Strong written and verbal communication, including explaining complex security and AI concepts to both technical teams and executives.
• Ability to influence technical direction and collaborate across organizational boundaries.
• Ability to work well in a fast-moving, collaborative environment where requirements change.
• Strong technical curiosity and a willingness to challenge traditional approaches while keeping to sound security, risk, and governance principles.

Salary Range

$153,520.00 - $242,400.00 USD (Salary)

Please note that the salary information provided herein is base pay only (gross); it does not include other forms of compensation which may or may not apply to this specific position, namely, performance-based bonuses, benefits-related payments, or other general incentives - none of which are guaranteed, may be subject to specific eligibility requirements, and are wholly within the discretion of Astreya to remit.

Further, the salary information noted above is a range that consists of a minimum and maximum rate of pay for this specific position. Where an applicant or employee is placed on this range will depend and be contingent on objective, documented work-related considerations like education, experience, certifications, licenses, preferred qualifications, among other factors.

Astreya offers comprehensive b enefits to all Regular, Full-Time Employees, including:

• Medical provided throughUHC(PPO, HSA,Surestoptions) / Medical provided through Kaiser (HMO option only) for California employees only
• Dental provided throughUHC
• Nationwide Vision provided byUHC
• Flexible Spending Account for Health & Dependent Care
• Pre‑Tax Account for Commuter Benefit/Parking & Transit (location‑specific)
• Continuing Education and Professional Development via various integrated platforms, e.g.Udemy and Coursera
• Corporate Wellness Programprovided by Goomi Group
• Employee Assistance Program
• Wellness Days

401k Plan

• Basic and Supplemental Life Insurance
• Short Term & Long Term Disability
• Critical Illness, Critical Hospital, and Voluntary Accident Insurance
• Tuition Reimbursement (available 6 months after start date, capped)
• Paid Time Off (accrued and prorated, maximum of 120 hours annually)
• Paid Holidays
• Any other statutory leaves, paid time, or otherancillarybenefits required under state and federal law