Distinguished Cybersecurity Architect – Adaptive Defense

Distinguished Cybersecurity Architect – Adaptive Defense

Requirements

• Bachelor’s degree or four or more years of work experience.
• Eight or more years of relevant experience required, demonstrated through one or a combination of work and/or military experience, or specialized training.
• Experience in cybersecurity architecture with a strong focus on threat modeling.
• Experience with cybersecurity defense operations, including penetration testing and red teaming.

Responsibilities

• Create and maintain detailed threat models using established frameworks (e.g., MITRE CAPEC, STRIDE, PASTA, Attack trees) to guide security testing and risk mitigation.
• Translate findings from penetration tests, red team exercises, and insider threat assessments into actionable architectural improvements.
• Design and implement security solutions that proactively address identified vulnerabilities and emerging threats.
• Collaborate with stakeholders across the organization to ensure alignment and hardening with security architecture solutions.
• Document and communicate security strategies, threat models, and remediation plans to both technical and non-technical audiences.
• Utilize benchmarks to create and enhance security baselines.
• Developing and maintaining high-quality documentation of infrastructure, processes, and procedures.
• Managing tasks using Jira and other collaboration tools.
• Stay current with the latest cybersecurity trends and technologies, integrating best practices into our threat modeling processes.

Preferred Qualifications

• Proficiency in using threat modeling frameworks such as MITRE CAPEC, STRIDE, PASTA, Attack-Trees.
• Identifying vulnerabilities using CWE or OWASP.
• Ability to design and implement effective security solutions to mitigate vulnerabilities.
• Excellent analytical, problem-solving, and communication skills, with the ability to translate technical concepts for diverse audiences.
• Experience with common information technology topics including IP networking, Operating Systems, Authentication, Encryption, APIs, Virtualization/Containers.
• Experience troubleshooting complex technical conditions in large, enterprise environments.
• A track record of leading cross-functional security initiatives.
• Work experience using Jira, AYS, or similar task management tools.
• Offsec Certified Professional (OSCP) and/or Certified Ethical Hacker (CEH) Certification.
• Experience with insider threat programs.
• Knowledge of security automation, orchestration, or threat intelligence tools.
• Deep insight into emerging threats and modern security technologies.