Engineer, Cybersecurity Architecture

About the role

The Cybersecurity Architecture team establishes security design standards, conducts architecture reviews, and provides strategic guidance to protect critical financial infrastructure. This role defines security requirements across network, data, system, and cloud environments, ensuring controls are appropriately designed before implementation by engineering teams.

Responsibilities

• Support threat modeling exercises to identify security risks and recommend mitigating controls
• Review and assess network security designs including segmentation, firewall rule requests, and connectivity requirements
• Evaluate data security requirements and recommend appropriate encryption, classification, and protection controls
• Participate in cloud architecture design reviews to identify security considerations; support evaluations of IAM configurations, network controls, and security service implementations
• Assist in security control assessments and gap analysis, document control effectiveness, and recommend improvements
• Maintain security architecture documentation, identify trends, design specifications, and reference architectures
• Collaborate with other Security, Infrastructure, Operations, Engineering, and Development teams on security requirements and design guidance

Requirements

• Degree in engineering discipline or equivalent experience
• 3+ years of relevant Information Security experience
• Top-tier analytics and problem-solving skills
• Ability to work in a service-oriented team environment
• Project management, organization, and time management skills
• Familiarity with data security concepts including encryption and data protection
• Effective written and verbal communication skills
• Ability to automate tasks using scripting and basic automation

Skills

• Network security fundamentals (firewalls, IDS/IPS, network segmentation, VPNs)
• Cloud platforms including core security services and IAM concepts
• Identity and access management principles
• Data security (encryption concepts, DLP fundamentals, HSMs, key management)
• System hardening (CIS Benchmarks, security baselines)
• DNS and application-level content-filtering
• Web application firewalls and Content Delivery Networks (CDNs)
• Security documentation and diagramming tools