Lead Cybersecurity Integrated Architect

Cox Enterprises; Hapeville (GA); On-site; USD 100,000 - 130,000; Full time

Job summary

A leading telecommunications firm is seeking a Cybersecurity Consultant with extensive experience in AWS and cybersecurity risk management. You will work closely with engineering teams to implement security best practices and contribute to the development of a cohesive cybersecurity strategy. The ideal candidate has at least 6 years of experience and a background in cybersecurity frameworks. This position is based in Hapeville, Georgia.

Qualifications

• 6 years of experience in cybersecurity or related field.
• 4 years focused specifically on cybersecurity.
• Experience designing and securing AWS infrastructure.

Responsibilities

• Advise teams on architecture decisions for cybersecurity.
• Identify and mitigate cybersecurity risks through threat modeling.
• Educate teams on cybersecurity best practices.

Skills

Cybersecurity expertise

AWS services

Agile methodologies

Consultative communication

Risk evaluation

Education

Bachelor’s degree in a related field

Master’s degree

Ph.D.

Tools

Python

.NET

Java

AWS

Job description

Primary Responsibilities

• Communicate cybersecurity guidelines to engineering teams and business teams and support their adoption of the guidelines.
• Be integrated with and in continuous contact with engineering teams to advise on their architecture decisions and assist with cybersecurity control implementation.
• Contribute to the identification and mitigation of cybersecurity risks based on threat modeling of products and enterprise tools.
• Provides cybersecurity architecture advice and consultation across major program and solution levels.
• Engage with cybersecurity peers to create a cohesive cybersecurity department and share back internally regarding business specific activities. Act as the on the ground cybersecurity security representative to the product and engineering teams.
• Partner with enterprise architecture, infrastructure and engineering teams to review existing architecture, identify gaps and recommend security enhancements.
• Participate in security events and incident response to identify gaps in current design and propose solutions to prevent threats from reoccurring.
• Educate product and enterprise architects and engineers on cybersecurity best practices and standards.
• Partner with the legal and security governance, risk and compliance teams to ensure that cybersecurity architecture enables compliance with relevant regulatory and contractual requirements.

Minimum Qualifications

• Bachelor’s degree in a related discipline and 6 years of experience in a related field. The right candidate could also have a different combination, such as a master\u2019s degree and 4 years of experience; a Ph.D. and 1 year of experience in a related field; or 10 years’ experience in a related field.
• At least 4 years focused on cybersecurity.
• Relevant experience with designing, securing, or operating AWS infrastructure and services.
• Clearly articulate the objective of specific cybersecurity policies and procedures to technical and non-technical stakeholders.
• Excellent customer service skills, writing, and executive presentation skills.
• Develop a strong and productive working environment with key stakeholders and collaborate closely with other Cox entities’ cybersecurity teams to implement cybersecurity best practices.
• Consultative nature to work through controversial or complex topics to employees, leaders, and/or senior leadership.
• Evaluate risks and recommend actions based on impact and likelihood of the risk to the business.
• Knowledge of current cybersecurity and technology architectures such as zero trust, IaaS, PaaS, SaaS, virtualization, containerization, DevSecOps, and software-defined networking across a variety of environments and deployments.
• Creatively solving complex cybersecurity challenges while exhibiting solid, pragmatic business acumen.
• Experience utilizing Agile methodologies.
• Initiating change and deploying solutions in Fortune 1000 companies.
• Knowledge of cybersecurity frameworks (e.g., ISO 27000, NIST, FFIEC) and industry relevant regulations that will guide architectural requirements (e.g., GDPR, FFIEC, GLBA).

Preferred Qualifications

• Experience in the development and design of cybersecurity standard methodologies to all layers of the hosting and application stack in both cloud and on-premises environments.
• Knowledge of Identity and Access Management (IAM), cryptography / key management, secrets management, access controls and security protocols (e.g., multi-factor, SAML, OAuth, OIDC).
• Experience with application security implementations and standard methodologies.
• Extensive technology knowledge and recognized expertise in several areas including Python, .NET, Java, Spring frameworks, Oracle, serverless, cloud patterns, cloud service and user authentication or similar.
• Experience with firewall, web application firewalls, and other edge services as well as deep understanding of DMZ and other network architectures.
• AWS Well-Architected Framework.
• Experience establishing a strategy for and implementing cloud enterprise solutions in AWS, GCP, or Azure.
• A strong understanding of cloud containers and/or serverless platforms (e.g., EKS, ECS, Lambda, Fargate).
• Experience in national critical infrastructure industries (telecommunications, financial services, defense, government, etc.).
• Big four consulting or Fortune 500 company experience.
• Relevant industry certification (e.g., CISSP, CEH, OSCP, Azure, AWS, CISM, CISA).