Description

Key Responsibilities

• Define the end-to-end Security Hub architecture for DPC.
• Design a control-driven security framework covering ~60 controls across multiple domains.
• Build centralized security visibility, governance, and reporting capabilities.
• Define requirements for scalability, resiliency, high availability, and disaster recovery.
• Create logical, physical, and integration architecture artifacts.
• Design detection capabilities across:Real-time security events
• Observability metrics
• Periodic compliance/security scans
• Translate enterprise security controls into enforceable technical controls.
• Define compliance monitoring, evidence generation, and audit-readiness processes.
• Design event-driven integrations with Keycloak, Ranger, OpenShift APIs, Kafka, LGTM, StorageGRID, DataHub, Vault/Venafi, ServiceNow, and enterprise observability platforms.
• Define telemetry ingestion, normalization, correlation, and workflow orchestration patterns.
• Design automated remediation and approval-based enforcement workflows.
• Support AI-enabled triage, prioritization, root-cause analysis, and recommendations.
• Participate in governance reviews, stakeholder workshops, operational readiness, and knowledge transfer.

Required Qualifications

• 15+ years of cybersecurity, cloud security, or security architecture experience.
• 5+ years designing and implementing enterprise security platforms.
• Experience leading large-scale security transformation initiatives in regulated environments.
• Experience building centralized security operations, governance, or compliance platforms.

Technical Skills

• Security architecture
• OpenShift / Kubernetes
• Cloud security (AWS, Azure, GCP)
• SIEM / SOAR
• SecOps and incident response
• Vulnerability management
• IAM
• Event-driven architecture
• Kafka
• API integrations
• ServiceNow
• Observability platforms
• Security control frameworks
• NIST CSF, NIST 800-53, CIS Controls, ISO 27001, Zero Trust

Preferred Qualifications

• Experience with Security Hub, SIEM, SOC, CNAPP, CSPM, or similar centralized security platforms
• Experience with control-driven governance models
• Experience with ServiceNow Security Operations
• Experience with policy-as-code and automation frameworks
• Experience integrating AI/GenAI into security operations
• Experience in financial services or other regulated industries

Key Skills

Education

Bachelor's degree