Security Architect - job 1 of 2

Ability to apply the methods, standards, and approaches for describing, analyzing, and documenting an organization's enterprise information technology (IT) architecture (e.g., Open Group Architecture Framework [TOGAF], Department of Defense Architecture Framework [DoDAF], Federal Enterprise Architecture Framework [FEAF]). Identify and address security gaps, align standards, frameworks and security with business and IT strategy 

Advise technology teams and senior management of identified risks and treatment options. Define or revise security elements, standards, and solutions for various technologies to achieve optimal security posture while delivering on business goals 

Host and operating systems hardening, baselines, auditing, monitoring and logging with appropriate security controls and best practices while meeting security best practices and business goals. 

Conduct security reviews and assessments to regularly determine the effectiveness of infrastructure and security platforms and identify areas of security risks and mitigations / improvements.  

Determine the appropriate use of emerging security technologies within business applications 

Identify, architect / design risk mitigation strategies / solutions, exceptions for infrastructure systems that were designed without system security considerations and security policies 

Maintain and enforce WBD cybersecurity policies and secure design documentation 

Qualifications & Experiences:  

• A minimum of 5+ years of hands-on experience in Security Architecture. 

• Bachelor’s Degree in Computer Science, Engineering, or other related discipline or 6+ years of previous technical experience, specifically security architecture experience. 

• Security certifications - CISSP, CISM, CISA, SANS, Security+, etc. 

• Exceptional verbal and written communication skills, specifically the ability to communicate within the context of the intended audience, whether that be senior executives or highly technical engineering resources. 

• Detailed understanding of the threats faced directly to consumer and digital platform organizations. 

• Working knowledge of at least one programming language (Python, Go etc.) 

• Proven hands-on experience securing cloud infrastructure. 

• Proven hands-on experience securing global hybrid architectures from both a computer and network infrastructure perspective. 

• Proven hands-on experience securing operating systems (Microsoft, Linux, MacOS etc.). 

• Proven hands-on experience with application security topics such as the OWASP top 10 and technical remediations required. 

• Detailed technical experience supporting and implementing SIEM & logging tools and the ability to extract actionable intelligence from large volume aggregated log storage. 

• Thorough understanding of Network and Compute architectures and, specifically the security aspects thereof. 

• Thorough understanding of compliance and regulatory frameworks and how they affect architecture designs and reviews.