Jobs · Engineering · Michigan

Cybersecurity Architect - Principal

Huntington National Bank · Detroit, MI · 1 mo ago
Engineering$93k–$189k/yrFull-time
We need to output HTML fragment with sections: About the role (description summary), Responsibilities (Duties And Responsibilities), Requirements (Basic Qualifications maybe), Qualifications (Preferred Qualifications), Skills (maybe not separate), Benefits, Pay, Schedule. We must only include sections when posting has real specific content. The posting includes description summary, duties, basic qualifications, preferred qualifications, compensation range, benefits description, workplace type (office) and flexible work arrangement, exempt status. Also "Compensation Range $93,000 - $189,000 Annual Salary" => Pay section. Benefits: they list health insurance, wellness program, life and disability insurance, retirement savings plan, paid leave programs, paid holidays and paid time off (PTO). So Benefits section. Schedule: Not explicitly given; they mention workplace type office, flexible work arrangement, but not schedule like full-time, part-time. Could infer full-time but not explicit. We should not create Schedule unless stated. So omit Schedule. We need headings:

for each section. Use
  • for any list of duties/requirements/benefits. Use

    for prose. We must not repeat job title as heading. Do not put Job ID etc. We must preserve all substantive information; do not invent or summarize away detail. So we need to include all details from description summary, duties, basic qualifications, preferred qualifications, compensation, benefits, workplace type, exempt status maybe as a short paragraph. We need to avoid boilerplate: cookie/navigation/legal/EEO/equal-opportunity/scam-warning. The posting includes "Huntington is an Equal Opportunity Employer." That's boilerplate; we should remove. Also "Tobacco-Free Hiring Practice..." etc. Also "Note to Agency Recruiters..." etc. Remove those. We need to include "Exempt Status: Yes" maybe as a short paragraph under About the role or separate? Could be part of description. Probably include as a short

    under About the role or separate meta. Since it's not a heading, we can include in a paragraph. Also "Workplace Type Office" and "Our Approach to Office Workplace Type" paragraph. That's substantive about flexible work arrangement. Should we include as a section? Could be part of About the role or a separate "Workplace" section but not required headings. The instruction: Use

    for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule). So we should stick to those headings only. So we can put workplace info under About the role or maybe under Benefits? Better to include in About the role as prose. Thus sections: - About the role: includes description summary, workplace type, exempt status maybe. - Responsibilities: Duties And Responsibilities list. - Requirements: Basic Qualifications list. - Qualifications: Preferred Qualifications list. - Benefits: list. - Pay: compensation range. We should not include Skills unless there is specific skills list; we have many skills in preferred qualifications but that's already qualifications. Could combine but we have Qualifications heading. We must not create empty sections. Now format. We need to preserve all substantive information: need to include each bullet from duties, basic qualifications, preferred qualifications, benefits. Let's extract. Description Summary paragraph: "The Cybersecurity Architect - Principal reports to the Cybersecurity Architect Senior Manager and frequently interacts with the Chief Information Security Officer, as well as audit and compliance. The Cybersecurity Architect - Principal is responsible for designing security solutions that protect business and customer data, but also allow the business to execute and innovate. The Cybersecurity Architect - Principal works closely with many diverse and dynamic teams, including, but not limited to, security engineering, IT infrastructure, application development, security operations, security audit and end users. This position is also responsible for architecting solutions to secure business-to-business initiatives, third-party relationships, outsourced solutions and vendors. The Cybersecurity Architect - Principal provides expert guidance for addressing current security issues but has the foresight to see where the industry is headed and proactively deliver optimal secure solutions. The architect is expected to think like an adversary and identify how solutions should evolve as the threat landscape changes. The position is 40% security architecture, 50% technical leadership, and 10% research and development. The individual partners with product managers and solution architects to set the security direction of offerings and articulates the value proposition. Also, the position provides guidance to Line of Business CIOs and is the final approver of information security controls on projects. Guides businesses to leverage common information security patterns Partners with subject matter experts to improve information security patterns and services" Note there is a missing period between patterns and Partners; but we keep as is. Duties And Responsibilities: list: - Deliver cybersecurity architecture work associated with projects delivery and roadmaps - Provide technical leadership to the cybersecurity organization - Perform research and development associated with enabling future cybersecurity capabilities Basic Qualifications: - 4+ years cybersecurity architecture. - 8+ years of information security experience. - 10+ years of experience delivering technology solutions in large-scale complex organizations. - Associate's Degree or 4+ additional years of equivalent experience. Preferred Qualifications: a long list. Need to preserve each bullet? The text is a paragraph with many items separated by commas and periods. We need to turn into list items. The instruction: Use
    • for any list of duties/requirements/benefits. So we should split into items. Let's parse: "Extensive knowledge of traditional security controls and technologies, such as: Security Information and Event Management (SIEM) systems, intrusion detection/prevention systems (IDS/IPS), public key infrastructure (PKI), identity and access management (IDAM) systems, antivirus and firewalls.Newer offerings such as endpoint detection and response (EDR), threat intelligence platforms, security automation and orchestration, deception technologies and application controls5+ years of experience in architecture, governance, risk management, PCI DSS control governance, application security, encryption, key management, and identity and access managementExperience with a broad range of mobile and wed application design, development, and management principles, practices, and procedures Experience influencing management on technical and business solutionsExperience in cloud computing technologies, including software-, infrastructure and platform-as-a-service, as well as public, private and hybrid environmentsExcellent verbal, written, and interpersonal communication skillsKnowledge and understanding of data protection technologies and practicesKnowledge and understanding of threat analysis and assessment of potential and current information security risk/threatsStrong understanding of application or software security such as: dynamic application security testing, secure code review, and secure static code analysisKnowledge and understanding of cryptography and key managementKnowledge and understanding of service-oriented architecture and associated security controlsKnowledge and understanding of enterprise authentication and authorization technologies such as LDAP, SAML, XACML, and reverse authenticating proxies.General understanding of diverse platforms and operating systems, including current and emerging technologiesCertified Information Systems Security Professional (CISSP)Experience architecting applications for financial services business" We need to split into sensible items. Could break by periods. Let's identify sentences: 1. Extensive knowledge of traditional security controls and technologies, such as: Security Information and Event Management (SIEM) systems, intrusion detection/prevention systems (IDS/IPS), public key infrastructure (PKI), identity and access management (IDAM) systems, antivirus and firewalls. 2. Newer offerings such as endpoint detection and response (EDR), threat intelligence platforms, security automation and orchestration, deception technologies and application controls 3. 5+ years of experience in architecture, governance, risk management, PCI DSS control governance, application security, encryption, key management, and identity and access management 4. Experience with a broad range of mobile and wed application design, development, and management principles, practices, and procedures 5. Experience influencing management on technical and business solutions 6. Experience in cloud computing technologies, including software-, infrastructure and platform-as-a-service, as well as public, private and hybrid environments 7. Excellent verbal, written, and interpersonal communication skills 8. Knowledge and understanding of data protection technologies and practices 9. Knowledge and understanding of threat analysis and assessment of potential and current information security risk/threats 10. Strong understanding of application or software security such as: dynamic application security testing, secure code review, and secure static code analysis 11. Knowledge and understanding of cryptography and key management 12. Knowledge and understanding of service-oriented architecture and associated security controls 13. Knowledge and understanding of enterprise authentication and authorization technologies such as LDAP, SAML, XACML, and reverse authenticating proxies. 14. General understanding of diverse platforms and operating systems, including current and emerging technologies 15. Certified Information Systems Security Professional (CISSP) 16. Experience architecting applications for financial services business We'll keep each as
    • . Benefits: list: health insurance coverage, wellness program, life and disability insurance, retirement savings plan, paid leave programs, paid holidays and paid time off (PTO). Could split each. Pay: compensation range $93,000 - $189,000 Annual Salary. Also mention incentive compensation plan. We'll include that. Workplace type and exempt status: include as paragraph under About the role. Now produce HTML. We must not include markdown fences. Just raw HTML. Let's craft.

      About the role

      The Cybersecurity Architect - Principal reports to the Cybersecurity Architect Senior Manager and frequently interacts with the Chief Information Security Officer, as well as audit and compliance. The Cybersecurity Architect - Principal is responsible for designing security solutions that protect business and customer data, but also allow the business to execute and innovate. The Cybersecurity Architect - Principal works closely with many diverse and dynamic teams, including, but not limited to, security engineering, IT infrastructure, application development, security operations, security audit and end users. This position is also responsible for architecting solutions to secure business-to-business initiatives, third-party relationships, outsourced solutions and vendors. The Cybersecurity Architect - Principal provides expert guidance for addressing current security issues but has the foresight to see where the industry is headed and proactively deliver optimal secure solutions. The architect is expected to think like an adversary and identify how solutions should evolve as the threat landscape changes. The position is 40% security architecture, 50% technical leadership, and 10% research and development. The individual partners with product managers and solution architects to set the security direction of offerings and articulates the value proposition. Also, the position provides guidance to Line of Business CIOs and is the final approver of information security controls on projects. Guides businesses to leverage common information security patterns Partners with subject matter experts to improve information security patterns and services.

      Workplace Type: Office. Certain positions outside our branch network may be eligible for a flexible work arrangement. We’re combining the best of both worlds: in-office and work from home. Our approach enables our teams to deepen connections, maintain a strong community, and do their best work. Remote roles will also have the opportunity to come together in our offices for moments that matter. Specific work arrangements will be provided by the hiring team.

      Exempt Status: Yes (not eligible for overtime pay).

      Responsibilities

      • Deliver cybersecurity architecture work associated with projects delivery and roadmaps
      • Provide technical leadership to the cybersecurity organization
      • Perform research and development associated with enabling future cybersecurity capabilities

      Requirements

      • 4+ years cybersecurity architecture.
      • 8+ years of information security experience.
      • 10+ years of experience delivering technology solutions in large-scale complex organizations.
      • Associate's Degree or 4+ additional years of equivalent experience.

      Qualifications

      • Extensive knowledge of traditional security controls and technologies, such as: Security Information and Event Management (SIEM) systems, intrusion detection/prevention systems (IDS/IPS), public key infrastructure (PKI), identity and access management (

Similar jobs