Senior Security Architect

Simpson Thacher & Bartlett LLP; New York (NY); On-site; USD 190,000 - 240,000; Full time

Job summary

Simpson Thacher & Bartlett LLP seeks a Senior Security Architect to lead a modern security architecture framework, integrating AI-enabled capabilities while aligning with business goals and evolving threats. The role emphasizes hands-on engineering across on‑premises, cloud, and hybrid environments.

You will establish standards, drive risk mitigation, and collaborate with global teams to ensure secure by design systems. The position is an individual contributor in a dynamic, complex environment.

Qualifications

• 10+ years in IT or information security
• 5+ years in enterprise/security architecture
• Strong knowledge of security frameworks, tools, encryption, authn/authz
• Knowledge of AI/ML, cloud, and hybrid architectures

Responsibilities

• Define and evolve the enterprise security architecture framework
• Develop target-state security roadmaps aligned to strategy
• Architect secure implementations across hybrid environments
• Establish secure config management and system hardening standards
• Define standards for secure use of AI and data protection
• Lead security reviews and risk remediation
• Partner with engineering to embed security into AI/ML lifecycles
• Document impact on overall security posture
• Oversee security tools portfolio and integration
• Design and implement cybersecurity solutions to prevent and detect threats
• Act as trusted advisor on security architecture and risk management
• Define and report KPIs to measure security maturity
• Stay current on threats and trends

Skills

Security architecture

Cloud security

AI/ML security

Threat intelligence

Security frameworks

Hands-on engineering

Education

Bachelor’s degree in information security/IT

Tools

Security tools

Encryption standards

Job description

The Senior Security Architect is responsible for developing and leading a modern security architecture framework that ensures systems, applications, and data are secure by design. This role drives the evaluation, integration, and governance of security solutions, including AI-enabled capabilities—that align with business objectives and evolving threat landscapes.

The position establishes enterprise technical standards, embeds risk mitigation strategies, and leverages cyber threat intelligence to proactively identify, assess, and address emerging risks.

The ideal candidate is a hands‑on engineer with deep expertise in security frameworks, infrastructure, and cloud environments as well as a strong understanding of AI‑driven security use cases and adversarial risks. They bring a strong security mindset—thinking like an attacker to identify and address vulnerabilities—and excel at influencing and collaborating across teams.

This individual is adaptable, meticulous, and able to navigate complexity, solve problems quickly, and drive effective outcomes in a dynamic environment. This is an individual contributor role.

ESSENTIAL JOB DUTIES & RESPONSIBILITIES

• Define, establish, and continuously evolve the enterprise security architecture framework aligned to business and technology strategy.
• Develop and maintain target‑state security architecture roadmaps, ensuring alignment with enterprise architecture and business objectives.
• Participate in Firm’s IT architecture review board to ensure that new initiatives and related projects adhere to Firm security architecture strategy, including review and approval of key design documents.
• Architect and guide secure implementations across hybrid environments, including on‑premises, cloud, and containerized platforms.
• Establish and enforce secure configuration management and system hardening standards.
• Define standards and best practices for secure use of AI, including data protection, access controls, and safe consumption patterns.
• Evaluate and secure enterprise adoption of AI‑powered tools, platforms, and third‑party services.
• Partner with engineering teams to embed security controls into AI/ML lifecycles.
• Create technical security standards and guidelines for all IT assets, including servers, endpoints, cloud platforms, hypervisors, mobile devices, network devices, and emerging technologies.
• Conduct security architecture reviews to identify gaps, risks, and drive remediation strategies.
• Document the impact of new systems and integrations on the Fim’s overall security posture.
• Oversee the security tools portfolio, ensuring effective selection, deployment, and integration across the technology stack.
• Lead proof of concepts, testing, and integration of new security tools, services, configurations, and risk mitigation strategies.
• Design and implement cybersecurity solutions to prevent unauthorized access, detect threats, and mitigate cyber-attacks across IT systems.
• Function as a trusted advisor to business, IT teams, and product organizations on security architecture and technology risk management.
• Define, and report key performance indicators (KPIs) to measure security effectiveness and maturity.
• Stay current on emerging threats, technologies, and industry trends to proactively reduce organizational risk.
• Build strong cross‑functional partnerships across global teams and external stakeholders.

This role is exempt meaning it is not overtime pay eligible.

EDUCATION

Required Bachelor’s degree in information security, IT, related discipline, or equivalent experience.

Preferred Professional certifications

Preferred Professional certifications such as CISSP, CCSP, CISM, or similar.

SKILLS AND EXPERIENCE

• 10+ years of experience in an IT or Information Security role, with at least 5 years of experience in an enterprise or security architecture role.
• Strong technical knowledge of security frameworks, security tools, encryption standards, authentication and authorization standards and infrastructure security standards.
• Deep expertise across security domains – Infrastructure Security, Identity and Access Management, Data Protection and Application Security.
• Knowledge of AI/ML, cloud platforms, and hybrid architecture.
• Experience planning and building enterprise cloud security at scale and mitigating security threats in the cloud.
• Experience working in a global organization and broad knowledge of security domains, technology risk management concepts, and a working knowledge of security and risk frameworks.
• Knowledge of common application architectures, design, protocols, and agile deployment methodology and best practices.
• Hands‑on engineering experience across servers, endpoints, networks, mobile, and cloud computing.
• Knowledge of core networking concepts including TCP/IP, firewalls, and network security products.
• Ability to create and execute a clear strategic vision for target state architecture that supports and enables businesses functions.
• Ability to manage multiple concurrent projects and activities and make effective judgments in prioritizing and time allocation.
• Must be able to execute with limited information and ambiguity.
• Must have a continuous learning mindset and a demonstrated aptitude for understanding strategic investments and new technologies.
• Must be able to build collaborative relationships and is comfortable interacting frequently with leadership and internal/external stakeholders.

Salary Information

NY Only: The estimated base salary range for this position is $190,000 to $240,000 at the time of posting. The actual salary offered will depend on a variety of factors, including without limitation, the qualifications of the individual applicant for the position, years of relevant experience, level of education attained, certifications or other professional licenses held, and if applicable, the location in which the applicant lives and/or from which they will be performing the job.

Simpson Thacher will not sponsor applicants for work visas for this position.

Privacy Notice

For information about how Simpson Thacher & Bartlett LLP collects and processes your personal information, please refer to our Privacy Notice available at https://www.stblaw.com/other/privacy-notice.

Simpson Thacher & Bartlett is committed to a collegial work environment in which all individuals are treated with respect and dignity. The Firm prohibits discrimination or harassment based upon race, color, religion, gender, gender identity or expression, age, national origin, citizenship status, disability, marital or partnership status, sexual orientation, veteran’s status or any other legally protected status. This Policy pertains to every aspect of an individual’s relationship with the Firm, including but not limited to recruitment, hiring, compensation, benefits, training and development, promotion, transfer, discipline, termination, and all other privileges, terms and conditions of employment.

#LI-Hybrid

Simpson Thacher & Bartlett LLP is one of the world’s leading international law firms. The Firm was established in 1884 and has approximately 2,000 lawyers. Headquartered in New York with offices in Beijing, Boston, Brussels, Chicago, Dallas, Hong Kong, Houston, London, Los Angeles, Luxembourg, Palo Alto, San Francisco, São Paulo, Singapore, Tokyo and Washington, D.C., the Firm provides coordinated legal advice and transactional capability to clients around the globe.