Cybersecurity Architect

Orb Enterprises - Frisco, TX

Full-time - Senior

Frisco, TX

Computer and Electronic Product Manufacturing

About the position

The Cybersecurity Architect role is a principal position responsible for enhancing the security posture across various technologies including mobile devices, IoT, enterprise applications, and cloud services. The individual will act as a subject matter expert, collaborating with multiple teams to ensure secure project delivery and compliance with regulatory standards.

Responsibilities

• Lead security reviews for new technologies, designs, and remediation planning efforts.
• Collaborate with Engineering & Operations Teams to address vulnerabilities from PSIRTs, scans, or breaches; implement, test, and monitor improvements.
• Apply various threat modeling approaches to create comprehensive threat models addressing trust boundaries, threat agents, vectors, and safeguards.
• Design and oversee firewall policies, SSL management, and vulnerability analysis/mitigation efforts.
• Understand advanced IP/security solutions in Wireless Network Architecture and provide expertise in network and information security topics.
• Develop detailed technical specifications and work autonomously on evolving technologies, conducting validation or research as required.
• Effectively present security concepts to leadership, peers, and various technical/non-technical teams.
• Ensure adherence to federal and compliance regulations, including SOX, PCI, and CPNI.

Requirements

• 10+ years in cybersecurity, focusing on network and information security.
• 5+ years of experience with Java, frameworks, Python, and Node.js; advanced skills in scripting (Python, Perl, Shell, HTML, PHP).
• 5+ years of experience with STRIDE, PASTA, TRIKE, ATTACK TREE, DREAD, KILL CHAIN, CAPEC, Cyber Threat Trees, and data flow diagrams.
• 8+ years in SSL certificate management and 5+ years in firewall policy design.
• 5+ years with various security tools, such as load balancers (A10, F5), firewalls (CheckPoint), Venafi, Mobile Iron, AWS, Azure, FireEye, CyberArk, ArcSight, Splunk, Symantec, PCF, Docker, Qualys, and Veracode.
• Experience with mobile application security and handset security.

Nice-to-haves

• Experience in telecommunications is preferred but not mandatory.
• Relevant cybersecurity certifications are advantageous, with prior UST experience preferred if applicable.