IT - Cyber Security Architect - Engineer Senior
About The Position
Mercedes-Benz Financial Services (MBFS) is committed to delivering a secure and trusted customer journey. To strengthen our regional cybersecurity posture, MBFS is seeking a Cyber Security Architect to deploy, operationalize, and mature application-level security capabilities in alignment with the global Architecture & Engineering (AE) strategy. This role serves as a senior technical authority responsible for identifying, assessing, and remediating application security risks while partnering closely with development teams, cloud engineers, and business stakeholders to ensure secure, scalable, and compliant solutions.
Requirements
- CISSP is a MUST
- Azure Certifications or working on completing Azure Certification
Responsibilities
- Deploy, operate, and mature application security tools, capabilities, and standardized requirements across the region.
- Identify, analyze, and document application-level vulnerabilities using structured and repeatable approaches.
- Provide hands-on support for secure application design, remediation efforts, and secure SDLC practices.
- Support the deployment, security, and monitoring of applications hosted in Microsoft Azure.
- Secure Azure workloads including App Services, Azure Functions, AKS, and Virtual Machines.
- Architect and review secure network configurations, including NSGs, private endpoints, and firewalls.
- Implement secrets management using Azure Key Vault.
- Leverage Defender for Cloud, Azure Policy, Log Analytics, and Microsoft Sentinel for governance, monitoring, and continuous improvement.
- Perform secure profiling and threat modeling using STRIDE, C4 modeling, and MITRE methodologies.
- Develop data flow diagrams and comprehensive threat models for critical applications.
- Translate identified threats into actionable, prioritized security recommendations.
- Track, coordinate, and report on remediation activities and overall application risk posture.
- Communicate risks, mitigation strategies, and compliance readiness to both technical and non-technical stakeholders.
- Design and guide secure authentication and authorization architectures using: OAuth 2.0, OpenID Connect (OIDC), SAML 2.0.
- Implement and support integrations with Microsoft Entra ID (Azure AD).
- Advise teams on JWT validation, managed identities, service-to-service authentication, RBAC, Conditional Access, and secure API authorization.
- Deliver targeted application security training and awareness sessions to development and engineering teams.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Career Level
Senior
Education Level
No Education Listed
