Cyber Security Architect - Application
Astreya
Serves as an expert contributor in the development and implementation of cybersecurity architectures, patterns, strategies, and solutions supporting emerging technology and AI-enabled cybersecurity capabilities.
Evaluates opportunities to leverage artificial intelligence, agentic AI, automation, orchestration, analytics, and other emerging technologies to enhance cybersecurity capabilities and operating models.
Develops current-state, transitional, and future-state cybersecurity architectures that integrate capabilities across multiple cybersecurity domains and technology platforms.
Configuration and Security Posture Management
Security Operations
Asset and Technology Inventory
Explores how AI agents and autonomous or semi-autonomous capabilities can securely interact with cybersecurity platforms, enterprise systems, data, and workflows while maintaining appropriate security controls, governance, and human oversight.
Evaluates emerging cybersecurity technologies, platforms, tools, and architectural approaches for potential applicability within the enterprise.
Develops reference architectures, architecture patterns, capability models, technical recommendations, and roadmaps supporting future cybersecurity capabilities.
Partners with cybersecurity domain architects, engineering teams, security operations, technology teams, and other stakeholders to evaluate cross-domain architecture requirements and integration opportunities.
Assesses architectural considerations associated with machine identities, AI agents, privileged access, authentication, authorization, data access, trust boundaries, and automated actions.
Evaluates security implications associated with integrating AI capabilities into cybersecurity technologies and operational workflows.
Helps establish architectural principles and guardrails for the responsible and secure adoption of emerging AI-enabled cybersecurity capabilities.
Identifies dependencies, architectural gaps, integration challenges, technical risks, and opportunities associated with future-state cybersecurity architectures.
Develops technical assessments, architecture documentation, recommendations, and executive-level presentations communicating complex concepts to both technical and business stakeholders.
Proactively monitors technology developments and industry trends that may materially change cybersecurity architecture, operating models, or defensive capabilities.
S. degree or equivalent work experience in Computer Science, Cybersecurity, Information Systems, Engineering, or another relevant technical field.
or advanced technical degree in Computer Science, Cybersecurity, Engineering, Artificial Intelligence, Information Systems, or equivalent field.
One or more relevant cybersecurity or technology certifications preferred, such as:
Certified Information Systems Security Professional (CISSP)
Certified Information Security Manager (CISM)
Certified in Risk and Information Systems Control (CRISC)
Cloud or security architecture certifications
Vendor-specific security or AI certifications
Other equivalent cybersecurity, architecture, cloud, or emerging technology certifications
Minimum of 6 years of combined cybersecurity, information technology, architecture, engineering, or related technical experience.
Demonstrated experience designing, evaluating, or implementing enterprise cybersecurity architectures and solutions.
Experience working across multiple cybersecurity technology domains rather than exclusively within a single security discipline.
Experience working with multidisciplinary technical teams including architects, engineers, cybersecurity operations, developers, infrastructure teams, and technology vendors.
Generative and agentic AI: LLMs, AI agent architectures, and agent-to-system and machine-to-machine interactions
AI security and governance: secure adoption of emerging AI capabilities
Zero Trust architecture: covering network, platform, and identity
Security platform strategy: integration, technology rationalization and consolidation, capability modeling, and roadmapping
Vulnerability and exposure management: attack surface management, asset discovery and inventory, and risk prioritization
Security configuration and posture management: control assessment and configuration baselines
Non-human identity management: machine, workload, and AI agent identities
Security operations and detection: endpoint protection, EDR/XDR, SIEM/SOAR, telemetry and analytics, threat detection and response, and automated orchestration
Knowledge, Skills, Abilities & Technical Competencies
Strong knowledge of cybersecurity architecture, enterprise security technologies, and emerging trends, including how AI and automation are changing architectures and operating models.
Ability to look past individual products and evaluate security as an integrated ecosystem, including the dependencies across identity, endpoints, infrastructure, applications, data, vulnerability management, security operations, and AI.
Ability to turn emerging concepts into practical architecture patterns, use cases, recommendations, and implementation guidance.
Strong written and verbal communication, including explaining complex security and AI concepts to both technical teams and executives.
Strong technical curiosity and a willingness to challenge traditional approaches while keeping to sound security, risk, and governance principles.
it does not include other forms of compensation which may or may not apply to this specific position, namely, performance-based bonuses, benefits-related payments, or other general incentives - none of which are guaranteed, may be subject to specific eligibility requirements, and are wholly within the discretion of Astreya to remit.
Where an applicant or employee is placed on this range will depend and be contingent on objective, documented work-related considerations like education, experience, certifications, licenses, preferred qualifications, among other factors.
Astreya
offers comprehensive
b
enefits to all Regular, Full-Time Employees,
including:
Medical provided through UHC (PPO, HSA, Surest options) / Medical provided through Kaiser (HMO option only) for California employees only
Dental provided through UHC
Flexible Spending Account for Health & Dependent Care
Pre-Tax Account for Commuter Benefit/Parking & Transit (location-specific)
Continuing Education and Professional Development via various integrated platforms, e.g. Corporate Wellness Program provided by Goomi Group
Employee Assistance Program
Basic and Supplemental Life Insurance
Short Term & Long Term Disability
Tuition Reimbursement (available 6 months after start date, capped)
Paid Holidays
Reference: WJ-4487_22428520