Senior Security Architect: External Attack Surface

Luxoft; United States; Remote; USD 150,000 - 210,000; Full time

Job summary

Luxoft is seeking a Senior Security Architect to support ESRO's Cybersecurity Transformation Program. You will design and govern vulnerability exposure management and external attack surface security capabilities to reduce risk across complex enterprise environments.

Responsibilities include assessing risks on internet-facing infrastructure, cloud services, DNS, SMTP, TLS, and SaaS, and coordinating with senior stakeholders using enterprise-approved AI tools for security operations.

Qualifications

• 8+ years of experience in security architecture, enterprise security, or platform security roles.
• Design or oversee Vulnerability Exposure Management and external exposure programs.
• Experience with internet-facing infrastructure, cloud services, DNS, SMTP, TLS, and SaaS exposure.
• Familiarity with threat intelligence, dark web monitoring, and external vulnerability scanning.

Responsibilities

• Design and oversee enterprise Vulnerability Exposure Management and external attack surface security programs.
• Assess security risks across internet-facing infrastructure, cloud services, DNS, SMTP, TLS certificates, and SaaS environments.
• Evaluate threat intelligence, dark web monitoring, and external vulnerability scanning capabilities to identify exposures.

Skills

Security Architecture

Vulnerability Exposure Management

External Attack Surface Management

Enterprise Security

Cloud Security

DNS / SMTP / TLS

SaaS Security

Threat Intelligence

Dark Web Monitoring

Vulnerability Scanning

Email Security

Proofpoint

Security Risk Management

Stakeholder Management

Education

Associate's degree in Computer Science, Information Security, Engineering, or equivalent practical experience

Tools

Proofpoint

Bright

Xpanse

Tenable

Splunk

Job description

Luxoft is seeking a Senior Security Architect to support ESRO's Cybersecurity Transformation Program. You will design and govern vulnerability exposure management and external attack surface security capabilities to reduce risk across complex enterprise environments.

Responsibilities include assessing risks on internet-facing infrastructure, cloud services, DNS, SMTP, TLS, and SaaS, and coordinating with senior stakeholders using enterprise-approved AI tools for security operations.