Cybersecurity Architect

ASM Research

About The Position

The Cybersecurity Architect, serving as the Cyber Engineering Lead, is responsible for ensuring the security and integrity of CASTLE-NET IT infrastructure and systems by designing, implementing, and maintaining comprehensive security measures to protect data, systems, and networks from threats. This role involves designing security architectures, conducting risk and vulnerability assessments, and working closely with IT teams, project managers, and stakeholders to ensure compliance with federal regulations, DoD standards, and industry best practices.

Requirements

Bachelor's degree in Computer Science, IT, Cybersecurity, or related field (or equivalent work experience)
8+ years of experience in cybersecurity architecture, design, and implementation
Expert understanding of cybersecurity principles, methodologies, and frameworks (NIST CSF, DoD RMF)
Proven expertise in conducting risk assessments, vulnerability assessments, and penetration testing
Proficiency with security tools including firewalls, IDS/IPS, antivirus, SIEM, and encryption technologies
Strong analytical, problem-solving, and organizational skills
Excellent project management and communication skills with ability to influence senior leadership
Cybersecurity Architecture & Design
Risk & Vulnerability Assessment
Security Controls Implementation
Penetration Testing & Security Testing
Federal Security Frameworks (NIST/DoD)

Nice To Haves

CISSP (Certified Information Systems Security Professional) or CCSK certification
Experience with USACE or other federal agency IT infrastructure and security requirements
Knowledge of cloud security and secure cloud architecture (Azure, AWS)
Experience with secure application development and secure coding practices
Background in federal IT contracting and government security authorization (RMF, FedRAMP)
Familiarity with compliance frameworks (FISMA, NIST 800-53, DoD 8500.01)
Experience with security operations center (SOC) capabilities and threat intelligence
Zero Trust Architecture
Cloud Security & Infrastructure Protection
Secure Application Development
Incident Response & Threat Intelligence
Security Compliance & Authorization (RMF, FedRAMP)

Responsibilities

Design comprehensive security architectures aligned with Zero Trust principles and federal security standards (NIST, DoD)
Conduct risk assessments and vulnerability assessments across IT infrastructure and systems
Perform penetration testing and security control validation to identify and mitigate vulnerabilities
Implement and maintain security controls including firewalls, IDS/IPS, antivirus, and encryption technologies
Develop security policies, procedures, and standards for infrastructure and application security
Lead security design reviews for systems and applications in development and deployment phases
Collaborate with IT operations and development teams to integrate security throughout the system lifecycle
Monitor security posture and incident detection capabilities to ensure continuous protection
Prepare comprehensive security assessment reports with findings and remediation recommendations
Stay abreast of emerging cyber threats, vulnerabilities, and security technologies