Cybersecurity Engineer/Architect

Apex Technology, Inc.•Los Angeles, CA

8d•$100,000 - $135,000•Hybrid

About The Position

The Cybersecurity Engineer/Architect is responsible for designing, implementing, and maintaining secure enterprise architectures, systems, applications, networks, and cloud environments. This role provides technical leadership in cybersecurity strategy, risk management, security engineering, and compliance initiatives while ensuring Apex's information assets are protected against evolving cyber threats. The ideal candidate combines deep technical expertise with strong business acumen to develop security solutions that align with organizational objectives, regulatory requirements, and industry best practices.

Requirements

Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Information Systems, Computer Engineering, or a related technical field.
7–10+ years of experience in cybersecurity, information security, network security, cloud security, or related IT disciplines.
3–5+ years of experience designing security architectures or leading cybersecurity engineering initiatives.
Experience implementing enterprise security controls and security frameworks.
Experience securing cloud platforms such as AWS, Azure, or Google Cloud Platform.
Security Architecture
Enterprise Security Architecture
Zero Trust Architecture
Secure-by-Design Principles
Threat Modeling
Security Control Design
Security Roadmap Development
Network & Infrastructure Security
Firewalls
IDS/IPS
VPN Technologies
Network Segmentation
DNS Security
TCP/IP Protocols
Secure Network Design
Cloud Security
AWS Security Services
Microsoft Azure Security Services
Google Cloud Security
Container Security
Kubernetes Security
Infrastructure as Code (Terraform, CloudFormation)
Identity & Access Management
Active Directory
Entra ID (Azure AD)
Single Sign-On (SSO)
Multi-Factor Authentication (MFA)
OAuth
SAML
Privileged Access Management (PAM)
Security Operations
SIEM Platforms (Elastic,Splunk)
Endpoint Detection & Response (EDR/XDR)
Vulnerability Management
Security Monitoring
Threat Intelligence
Incident Response
Application Security
Secure SDLC
DevSecOps
Application Security Testing (SAST/DAST)
API Security
OWASP Top 10
Secure Coding Practices
Programming & Automation
Python
PowerShell
Bash/Shell Scripting
REST APIs
Security Automation
Strategic thinking and problem-solving
Strong analytical and risk assessment capabilities
Excellent written and verbal communication skills
Ability to communicate complex technical concepts to non-technical audiences
Leadership and mentoring skills
Project and stakeholder management
Cross-functional collaboration
Decision-making under pressure
Strong documentation and presentation skills

Nice To Haves

Master's degree in Cybersecurity, Information Security, Computer Science, or related discipline.
CISSP (Certified Information Systems Security Professional)
CISM (Certified Information Security Manager)
CCSP (Certified Cloud Security Professional)
SABSA Security Architecture Certification
AWS Certified Security – Specialty
Microsoft Azure Security Engineer Associate
GIAC Security Certifications (GIAC, GSEC, GDSA, etc.)
Experience with large-scale enterprise environments.
Experience in regulated industries (financial services, healthcare, government, aerospace, defense, etc.).
Experience with cloud-native security and DevSecOps practices.
Knowledge of MITRE ATT&CK framework and threat intelligence methodologies.
Experience supporting security audits and compliance assessments.
Experience designing resilient and highly available security architectures.

Responsibilities

Design and maintain enterprise-wide cybersecurity architecture aligned with business and technology strategies.
Develop secure architectures for cloud, on-premises, hybrid, and multi-cloud environments.
Create and maintain security standards, reference architectures, and technical design documents.
Perform threat modeling and security architecture reviews for new systems, applications, and infrastructure.
Evaluate emerging technologies and recommend security controls and solutions.
Design, implement, and optimize security controls across networks, systems, endpoints, applications, and cloud platforms.
Lead deployment and integration of security technologies including SIEM, IDS/IPS, DLP, EDR/XDR, IAM, and vulnerability management platforms.
Develop and automate security processes using scripting and infrastructure-as-code methodologies.
Collaborate with infrastructure, application development, and cloud engineering teams to embed security into technology solutions.
Conduct security risk assessments, vulnerability assessments, and security audits.
Identify security gaps and develop remediation strategies.
Ensure compliance with applicable regulatory and industry frameworks, including: NIST 800-53, NIST 800-171/172, ISO 27001, CIS Controls, SOC 2.
Support governance, risk, and compliance (GRC) initiatives.
Provide architectural guidance during cybersecurity incidents and investigations.
Support incident response, threat hunting, and forensic analysis activities.
Review security events and identify opportunities to strengthen defensive capabilities.
Assist in developing cyber resilience and business continuity strategies.
Serve as a cybersecurity subject matter expert for technical and business stakeholders.
Mentor junior cybersecurity engineers, analysts, and administrators.
Present security recommendations, risk assessments, and strategic initiatives to leadership.
Partner with IT, engineering, operations, legal, and compliance teams to support enterprise security objectives.