Cybersecurity Engineer / Architect

Lattice Semiconductor•San Jose, CA

21d•$209,281

About The Position

Lattice Semiconductor is seeking a Cybersecurity Engineer/Architect to design, implement, and maintain robust security architectures for all IT projects and systems. This role involves aligning the organizational security strategy with overall business and technology goals. The ideal candidate will have a strong understanding of security principles, best practices, and relevant technologies, with proven experience in architecting and implementing security solutions across multiple domains. Lattice Semiconductor is a global leader in low power programmable solutions, committed to innovation, customer success, and fostering a diverse and inclusive workplace.

Requirements

Bachelor's degree in Computer Science, Information Security, or a related field.
Minimum of [Number] years of experience in cybersecurity, with a focus on the areas mentioned in the job title.
Proven experience in architecting and implementing security solutions across multiple domains.
Deep understanding of security principles, best practices, and relevant technologies.
Strong knowledge of IAM concepts, protocols (SAML, OAuth, OpenID Connect), and solutions.
Expertise in vulnerability management processes and tools.
In-depth knowledge of cloud security best practices and platforms (AWS, Azure, GCP).
Experience with application security testing methodologies and tools.
Proficiency in securing endpoint and server environments.
Understanding of API security principles and best practices.
Familiarity with AI/ML concepts and emerging security considerations.
Excellent analytical, problem-solving, and troubleshooting skills.
Strong communication, presentation, and interpersonal skills.
Ability to work independently and as part of a team.

Nice To Haves

Relevant security certifications such as CISSP, CCSP, CEH, OSCP, AWS Certified Security – Specialty, Microsoft Certified: Azure Security Engineer Associate.
Experience with security automation and orchestration tools.
Knowledge of scripting languages (e.g., Python, PowerShell).
Experience with threat modeling and risk assessment methodologies.
Familiarity with security frameworks (e.g., NIST CSF, ISO 27001).

Responsibilities

Configure and manage Microsoft 365 E5 Security features including Defender for Office 365, Microsoft Purview DLP, Defender for Endpoint, and Microsoft Sentinel.
Administer and secure Microsoft Entra ID (Azure AD), including MFA, Conditional Access, Privileged Identity Management (PIM), and Identity Protection.
Operate and optimize vulnerability scanning tools and coordinate remediation efforts with IT and DevOps teams.
Deploy and manage EDR solutions (e.g., Defender for Endpoint, CrowdStrike) and enforce endpoint hardening policies.
Configure and monitor enterprise firewalls, VPNs, and network segmentation strategies.
Implement and maintain Data Loss Prevention (DLP) policies across M365, endpoints, and cloud services.
Harden and monitor on-premises Active Directory environments, including GPOs, delegation, and auditing.
Secure isolated R&D lab environments, enforce access controls, and monitor for anomalous activity.