Lead Cybersecurity Architect

As a Lead Cybersecurity Architect, you will play a crucial role in promoting and implementing robust cybersecurity architectural principles, standards, and design patterns. You will provide expert guidance to engineering teams for developing secure products and enterprise tools across multi-cloud and on-premises environments. Your integration with the product and engineering teams will ensure that security is a fundamental aspect of our processes.

In this role, you will leverage your extensive knowledge in cybersecurity to collaborate with cross-functional teams to address unique cybersecurity risks that may arise across various business units. Reporting directly to the Director of Integrated Cybersecurity Architecture at Cox Automotive, you will have the opportunity to influence a wide range of projects.

Key Responsibilities:

• Advocate for cybersecurity guidelines with engineering and business teams, supporting their implementation and adoption.
• Maintain continuous communication with engineering teams to offer advice on architectural decisions and cybersecurity control integration.
• Contribute to the identification and mitigation of cybersecurity risks through thorough threat modeling of products and tools.
• Provide architecture advice and consultation across major program levels.
• Engage with cybersecurity peers to foster a cohesive cybersecurity department and relay business-specific concerns.
• Collaborate with enterprise architecture, infrastructure, and engineering teams to assess existing architectures and recommend security enhancements.
• Participate in security events and incident responses to identify design gaps and propose solutions for future prevention.
• Educate architects and engineers on cybersecurity best practices.
• Work with legal and compliance teams to ensure architecture meets regulatory and contractual requirements.

Minimum Qualifications:

• Bachelor's degree in a related discipline and a minimum of 6 years of relevant experience. Alternative combinations of education and experience will be considered.
• Minimum of 4 years dedicated to cybersecurity.
• Experience in designing, securing, or operating AWS infrastructure and services.
• Ability to clearly communicate cybersecurity policies to both technical and non-technical audiences.
• Strong customer service skills as well as excellent writing and presentation abilities.
• Experience collaborating with diverse stakeholders and cybersecurity teams to instill best practices.
• Consultative skills to navigate complex issues with employees and leadership.
• Competence in risk evaluation and actionable recommendation based on potential impacts.
• Familiarity with cybersecurity and technology architectures such as zero trust, IaaS, PaaS, SaaS, and DevSecOps.
• Creative thinker with a pragmatic approach to solving cybersecurity challenges.
• Experience with Agile methodologies.
• Demonstrated success in implementing change within Fortune 1000 companies.
• Knowledge of cybersecurity frameworks (e.g., ISO 27000, NIST) and regulations affecting architectural requirements.
• Experience collaborating with AI agents to enhance architectural assessments.
• Proficient in leading teams on AI-enhanced solutions, establishing standards for AI integration, and assessing relevant technologies.
• Ability to implement AI-driven governance and compliance frameworks.
• Experience in optimizing vendor tool assessments using AI.
• Must be authorized to work in the United States without current or future sponsorship.

Preferred Qualifications:

• Experience developing cybersecurity standard methodologies covering the entire stack in cloud and on-premises environments.
• Knowledge of Identity and Access Management (IAM) and security protocols.
• Background in application security practices.
• Technical expertise in various programming languages and cloud services.
• Experience with firewall and network security measures.
• Familiarity with the AWS Well-Architected Framework.
• Experience establishing cloud enterprise solutions primarily in AWS, GCP, or Azure.
• Strong understanding of containerization and serverless platforms.
• Background in critical infrastructure sectors.
• Experience with large consulting firms or Fortune 500 companies.
• Relevant industry certifications (e.g., CISSP, CEH, AWS).

Compensation:

The base salary ranges from $119,600.00 to $199,400.00 and may vary based on factors such as location and the candidate's qualifications. Additional compensation, including an incentive program, may be available.

Benefits:

We offer eligible employees generous vacation and wellness leave policies, including up to 160 hours of paid wellness annually, seven paid holidays, and additional paid time off for various needs. Applicants must be authorized to work in the U.S. without sponsorship.