Security Architect for SOC 2 & CJIS Compliance

EvidaraIQ; United States; Remote; USD 130,000 - 180,000; Full time

Job summary

EvidaraIQ seeks a security architect to establish the security and compliance foundations for a platform handling sensitive digital evidence. You will own security architecture and drive readiness for SOC 2 Type II while aligning controls with CJIS requirements to support trust before and after launch.

You will design and implement security controls, review code and infrastructure, and collaborate with engineering on secure development practices.

Qualifications

• Minimum 5 years of information security or cybersecurity experience.
• Knowledge of security frameworks such as NIST, ISO 27001, and SOC 2.
• Cloud security experience with AWS, GCP, or Azure.
• Familiarity with SIEM, IDS/IPS, vulnerability scanners, and security monitoring.
• Understanding of network security, encryption, authentication, and audit processes.

Responsibilities

• Design and implement security controls and infrastructure.
• Assess systems through security reviews, vulnerability testing, and penetration testing.
• Lead SOC 2 Type II readiness and the path toward certification.
• Create security policies and manage monitoring, logging, and incident response.
• Review code, cloud infrastructure, and third‑party integrations for security risks.
• Work with engineering teams on secure development practices and investigate incidents.
• Address applicable CJIS, HIPAA, and other regulatory requirements.

Skills

Information security

Cybersecurity

Analytical skills

Communication skills

Education

Bachelor's degree or equivalent

Tools

AWS

GCP

Azure

Job description

EvidaraIQ seeks a security architect to establish the security and compliance foundations for a platform handling sensitive digital evidence. You will own security architecture and drive readiness for SOC 2 Type II while aligning controls with CJIS requirements to support trust before and after launch.

You will design and implement security controls, review code and infrastructure, and collaborate with engineering on secure development practices.