Cybersecurity Operations Architect

About the role

The Cybersecurity Operations Architect provides technical engagement and architectural insight for Vertex's cybersecurity operations program, including AI-augmented detection, response, operations, and threat intelligence capabilities. This role partners closely with SecOps, engineering, architecture, IT, legal, privacy, and other stakeholders to proactively strengthen operational resilience through scalable security architectures, rigorous security architecture reviews, detection engineering excellence, and continuous improvement.

Responsibilities

• Drive key areas of cybersecurity operations architecture and strategy, conducting and evaluating security architecture reviews across the operations stack, influencing platform and tooling decisions, and serving as a trusted advisor on complex operational and AI-related security risks.
• Design resilient defense, detection, and response architectures, leveraging AI tooling to improve workflows and supplement security engineer capabilities, and continuously improving how threats are detected, investigated, and remediated.
• Evolve and improve major components of the cybersecurity operations architecture, translating business and threat risk into actionable, measurable operational programs with defined success metrics.
• Conduct and evaluate security architecture reviews for platforms, integrations, and workflows, ensuring alignment with enterprise security standards and risk posture; track identified gaps through resolution.
• Lead the architectural design and implementation of cutting-edge defense and detection engineering strategies, including log ingestion pipelines, protection configurations, correlation logic, and alerting frameworks across Cloud, Infrastructure, and SaaS security platforms.
• Deliver continuous improvements for incident response, digital forensics, threat hunting, and other security operations capabilities, with a focus on systemic operational improvement.
• Improve capabilities for AI-augmented security operations, including automated triage, behavioral analytics, anomaly detection, and AI-driven enrichment and response functions.
• Define and implement AI Security Operations pipelines and workflows, including data handling, model access, and inference pipeline monitoring; collaborate on threat modeling for AI-augmented operations addressing misuse, data leakage, adversarial manipulation, and supply-chain exposure.
• Serve as a senior advisor to security and engineering leadership on operational risk, architectural trade-offs, and technology investment decisions.
• Support various cybersecurity and organizational initiatives to improve the overall corporate posture.
• Identify and articulate cybersecurity operations best practices, including defense in depth, adaptive trust architecture, cloud incident response, and purple teaming methodologies.
• Mentor and provide technical leadership to cybersecurity operations engineers and analysts; serve as an escalation point for complex security operations and incident response decisions.

Requirements

• 5+ years of experience in the security operations domain, including designing and implementing security operations architectures across Cloud, Infrastructure, and SaaS security capabilities.
• 5+ years of experience implementing and operating security platforms across multi-cloud environments (AWS, Azure, GCP, OCI).
• 5+ years of experience with detection engineering, log management, and security automation capabilities.
• Demonstrated experience conducting security architecture reviews for operational platforms, integrations, and tooling.
• 2+ years of demonstrable experience with AI development and tooling and its application to security operations workflows.

Qualifications

• Bachelor's degree in Cybersecurity, Information Assurance, Computer Science, or a related field; equivalent combination of education, training, and relevant professional experience accepted in lieu of a formal degree.
• Experience with AI threat modeling for security operations, including misuse, data leakage, adversarial manipulation, and supply-chain exposure scenarios.
• Track record of mentoring cybersecurity operations engineers and analysts and fostering strong cross-functional collaboration.