Senior Cybersecurity Architect: Cloud, AI, DevSecOps

ISO New England; Manchester (NH); Hybrid; USD 135,000 - 168,000; Full time

Benefits offered by this job

Hybrid work 3 days onsite

Tuition reimbursement

Professional development

Wellness programs

Onsite gym

Flexible work hours

Relocation assistance

Employee networks

Job summary

ISO New England is seeking an experienced Cybersecurity Analyst to advance enterprise security across cloud, AI, DevSecOps, and regulated environments. The role emphasizes governance, risk management, and collaboration with stakeholders to strengthen security posture.

The ideal candidate will have hands-on experience in AWS/Azure, vulnerability management, and security controls, with a focus on automation and continuous improvement in a hybrid work setting.

Qualifications

• 5+ years in cybersecurity, security engineering, or AI security roles.
• 3+ years security experience in AWS and/or Azure.
• Experience designing and implementing enterprise security across cloud, infrastructure, applications, and hybrid environments.
• Hands-on with IAM, CSPM, CIEM, container security, and cloud security best practices.
• Experience integrating security controls into CI/CD pipelines and DevSecOps environments.
• Knowledge of AI security concepts including Generative AI, LLM security, AI governance, and AI risk management.
• Experience performing vulnerability management, security assessments, configuration reviews, threat modeling, and cybersecurity risk assessments.
• Knowledge of SIEM, EDR/XDR, CNAPP, DSPM, vulnerability management, identity and access management, encryption, and security monitoring platforms.
• Familiarity with NERC CIP, NIST Cybersecurity Framework, NIST SP 800 Series, ISO 27001, CIS Controls, and regulatory requirements.
• Strong analytical, troubleshooting, communication, documentation, and collaboration skills.
• Ability to manage multiple priorities independently while providing technical leadership.
• Experience with API security practices including secure API design, authentication/authorization, access control, encryption, and API threat protection.

Responsibilities

• Develop and implement enterprise cybersecurity strategies aligned with objectives, regulations, and best practices.
• Ensure compliance with NERC CIP, NIST, CIS controls, ISO 27001, and SOC1/SOC2.
• Implement security controls across cloud, infrastructure, applications, AI/ML environments, and OT systems.
• Conduct cloud security assessments across AWS and Azure (IAM, CSPM, CIEM, container security).
• Integrate security controls into CI/CD pipelines and DevSecOps processes.
• Assess and secure AI/ML systems, Generative AI, and LLM integrations through governance and data protection.
• Perform vulnerability, network, configuration, and risk assessments with remediation tracking.
• Support security monitoring, threat detection, incident response, and audit evidence collection.
• Collaborate with cross-functional teams to embed security in system design and operations.
• Develop security policies, standards, governance docs, and compliance reporting.
• Monitor threats and regulatory changes to enhance security posture.
• Provide mentorship and cross-functional guidance for secure technology adoption.

Skills

Cloud security

Vulnerability management

DevSecOps

AI security

Network security

Security compliance

SIEM/EDR/XDR

CNAPP/DSPM

IAM

Encryption

API security

Governance and risk

Regulatory compliance

Education

Bachelor's degree in information technology, Cybersecurity, Computer Science, or related field

Advanced degree in Cybersecurity Management or AI (desirable)

Tools

AWS

Azure

CSPM

CIEM

Job description

ISO New England is seeking an experienced Cybersecurity Analyst to advance enterprise security across cloud, AI, DevSecOps, and regulated environments. The role emphasizes governance, risk management, and collaboration with stakeholders to strengthen security posture.

The ideal candidate will have hands-on experience in AWS/Azure, vulnerability management, and security controls, with a focus on automation and continuous improvement in a hybrid work setting.