Cybersecurity SME Cryptography Solution Architect AWS AI

Yasmesoft Inc

Irving (TX)

Ibrido

USD 117.000 - 131.000

Tempo pieno

3 giorni fa

Candidati tra i primi

Aumenta le possibilità di ricevere una risposta da questo datore di lavoro

Il tuo curriculum e una lettera di presentazione personalizzati, che corrispondono esattamente a ciò che sta cercando.

Supera i filtri ATS

Vantaggi offerti da questo lavoro

Health insurance

Descrizione del lavoro

Yasmesoft Inc in Irving, TX seeks a senior-level Cybersecurity SME Solution Architect to design and operationalize an AWS-based agentic AI pipeline for cryptography vulnerability detection and remediation.

The role focuses on LangGraph workflow on AWS ECS Fargate, LLM integration via Amazon Bedrock, and a secure reviewer dashboard with Cognito and API Gateway. You will parse JSON/SBOM/CBOM scans and enforce encryption standards such as TLS 1.3 and AES-256-GCM.

Mansioni

Architect an end-to-end multi-agent LangGraph workflow hosted on AWS ECS Fargate.
Design the LLM integration layer using Amazon Bedrock with Claude/Gemini APIs to drive automated vulnerability remediation logic.
Build a Retrieval-Augmented Generation (RAG) vector system with OpenSearch to map security scan findings to enterprise rule dictionaries.
Design a state-management layer using DynamoDB to track remediation checkpoints.
Implement a secure Reviewer Dashboard with API Gateway, AWS Lambda, and Amazon Cognito to support human-in-the-loop approval gates.
Parse and analyze raw JSON/SBOM/CBOM vulnerability scans across complex enterprise applications.
Identify critical deviations from modern encryption standards, including TLS migrations (1.0/1.2 to 1.3), cipher suite upgrades (AES-128 to AES-256-GCM), and SSH host key hardening.
Translate infrastructure characteristics into specific technical remediation requirements.
Detect unencrypted secrets and keys in codebases and architect mappings for KMS integration.
Serve as a Senior Cybersecurity SME analyzing CBOM data to produce actionable patterns for AI engineers.

Descrizione del lavoro

Yasmesoft Inc is hiring a senior-level Cybersecurity SME Solution Architect to design and operationalize an AWS-based agentic AI pipeline for cryptography vulnerability detection and remediation.

Responsibilities

Architect an end-to-end multi-agent LangGraph workflow hosted on AWS ECS Fargate.
Design the LLM integration layer using Amazon Bedrock with Claude/Gemini APIs to drive automated vulnerability remediation logic.
Build a Retrieval-Augmented Generation (RAG) vector system with OpenSearch to map security scan findings to enterprise rule dictionaries.
Design a state-management layer using DynamoDB to track remediation checkpoints.
Implement a secure Reviewer Dashboard with API Gateway, AWS Lambda, and Amazon Cognito to support human-in-the-loop approval gates.
Parse and analyze raw JSON/SBOM/CBOM vulnerability scans across complex enterprise applications.
Identify critical deviations from modern encryption standards, including:
- TLS migrations from 1.0/1.2 to 1.3
- Cipher suite upgrades (AES-128 to AES-256-GCM)
- SSH host key hardening
Translate infrastructure characteristics (for example, hardware load balancers and IoT constraints) into specific technical remediation requirements.
Detect unencrypted secrets and keys in codebases and architect mappings for KMS integration.
Serve as a Senior Cybersecurity SME analyzing proprietary cryptography bill of materials (CBOM) data to produce actionable patterns for AI engineers.

Requirements

Senior-level expertise in Cloud and Software Architecture; AWS Solutions Architect Professional certification is highly preferred.
Deep, demonstrable expertise in AWS networking, compute (ECS/Fargate), and serverless data stores (DynamoDB, OpenSearch).
Hands-on architectural experience with Generative AI orchestration frameworks, specifically LangGraph and LangChain.
Strong foundation in DevSecOps practices and automated remediation pipelines.
Senior-level expertise in Cybersecurity, Cryptography, and Security Data Analysis.
Deep technical mastery of enterprise encryption protocols including:
- TLS 1.3
- IKEv2 IPsec
- AES-256
- Post-Quantum Cryptography (PQC) standards
High proficiency in parsing and analyzing raw security data logs (JSON, SBOM formats).
Ability to clear expedited enterprise security onboarding and strictly adhere to secure data-handling protocols.