Description

Define the end-to-end Security Hub architecture and control-driven security framework for enterprise visibility, governance, and compliance.

This role is hybrid.

Responsibilities

• Design control-driven security frameworks covering approximately 60 controls across multiple domains.
• Define scalability, resiliency, high availability, and disaster recovery requirements for security platforms.
• Architect event-driven integrations with Keycloak, Ranger, OpenShift, Kafka, LGTM, StorageGRID, DataHub, Vault/Venafi, ServiceNow, and enterprise observability platforms.
• Define telemetry ingestion, normalization, correlation, and workflow orchestration patterns for real-time security events and compliance scans.
• Design automated remediation, approval-based enforcement workflows, and support AI-enabled triage and root-cause analysis.

Required Skills

• 15+ years of cybersecurity, cloud security, or security architecture experience.
• 5+ years designing and implementing enterprise security platforms in regulated environments.
• Deep expertise in AWS, Azure, and GCP cloud security and container security (Kubernetes/OpenShift).
• Strong background in SIEM/SOAR, SecOps, incident response, and vulnerability management.
• Proficiency in IAM, event-driven architecture, and API integrations.
• Experience with ServiceNow, Kafka, and observability platforms.
• Familiarity with NIST CSF, NIST 800-53, CIS Controls, ISO 27001, and Zero Trust frameworks.
• Bachelor's degree in a relevant field or equivalent experience.

Preferred Skills

• Experience with Security Hub, CNAPP, CSPM, or control-driven governance models.
• Background in policy-as-code, automation frameworks, and integrating AI/GenAI into security operations.
• Experience in financial services or other highly regulated industries.

Key Skills

Education

Bachelor's degree