Information Security Architect – Endpoint Security / EDR-XDR

Cadence Design Systems•San Jose, CA

2d•$168,000 - $312,000

About The Position

Cadence is seeking an experienced Information Security Architect focused on endpoint security to define, architect, and evolve the enterprise endpoint security strategy, primarily for EDR, XDR, and modern endpoint protection. The role establishes the architectural vision, security standards, technical roadmaps, and governance model across Windows, Linux, and macOS environments. It translates business and security requirements into scalable architectures aligned with the organization’s cybersecurity strategy, risk appetite, regulatory obligations, and threat landscape. The architect serves as the senior technical authority and subject-matter expert for endpoint security and EDR/XDR. The role combines strategic architecture leadership with sufficient hands-on expertise to evaluate solutions, validate designs, troubleshoot complex security issues, and guide engineering teams. It includes developing endpoint security architectures and integrations, advancing threat detection and response, defining endpoint baselines and governance, supporting audits and risk decisions, and leading endpoint security work associated with enterprise transformations and mergers and acquisitions. The position requires collaboration with security operations, incident response, engineering, infrastructure, identity, network, cloud, application, and enterprise architecture teams. The architect also mentors technical staff, leads evaluations and design workshops, and communicates architecture decisions and risks to technical and executive audiences.

Requirements

At least 8 years of experience in information security, cybersecurity engineering, security architecture, endpoint security, security operations, or a related field.
Demonstrated experience designing and architecting enterprise endpoint security solutions at scale.
Deep hands-on and architectural experience with EDR and/or XDR technologies.
Experience architecting and governing EDR/XDR environments across thousands of endpoints.
Strong understanding of endpoint security architecture across Windows, Linux, and macOS.
Strong understanding of endpoint attack techniques, malware behavior, persistence, privilege escalation, lateral movement, command execution, and common attacker techniques.
Strong experience with EDR/XDR detection, threat hunting, incident response, remediation, and endpoint isolation.
Experience developing enterprise security standards, architecture patterns, technical baselines, and security controls.
Strong understanding of networking fundamentals, including TCP/IP, DNS, HTTP/HTTPS, TLS, proxies, firewalls, and common security protocols.
Experience designing integrations between EDR/XDR platforms and SIEM, SOAR, ITSM, vulnerability management, identity, and other security technologies.
Strong understanding of security architecture principles, defense-in-depth, Zero Trust, least privilege, and risk-based security design.
Experience with scripting and automation using PowerShell, Python, Bash, or similar technologies.
Strong analytical, architecture, documentation, and problem-solving skills.
Excellent communication skills and ability to influence technical teams and senior stakeholders.
Ability to operate effectively in a large, complex enterprise with multiple technology and infrastructure organizations.

Nice To Haves

Experience with multiple leading EDR/XDR platforms and technologies.
Experience evaluating, selecting, and migrating between EDR/XDR platforms.
Experience integrating EDR/XDR with SIEM, SOAR, MDR, ITSM, identity, vulnerability management, and cloud security platforms.
Experience with Microsoft security technologies, including Microsoft Defender, Entra ID, Intune, Microsoft 365 Defender, and related services.
Experience with enterprise EDR/XDR platforms such as SentinelOne, CrowdStrike, Microsoft Defender for Endpoint, Palo Alto Cortex XDR, or similar technologies.
Experience architecting security solutions in Azure and/or AWS.
Strong knowledge of MITRE ATT&CK and adversary techniques.
Experience with vulnerability management platforms such as Tenable.
Experience with CIS benchmarks, endpoint hardening, security baselines, and compliance frameworks.
Experience with enterprise endpoint management platforms such as SCCM/MECM, Intune, Jamf, Ansible, or similar technologies.
Experience with Zero Trust architecture and endpoint security modernization.
Experience leading endpoint security architecture assessments and technology evaluations.
Experience supporting mergers, acquisitions, divestitures, and enterprise technology integrations.
Security architecture certifications such as CISSP, SABSA, CCSP, or GIAC.

Responsibilities

Define and own enterprise endpoint security architecture and strategy across Windows, Linux, and macOS environments.
Develop and maintain roadmaps for EDR, XDR, endpoint protection, threat prevention, detection, and response capabilities.
Establish endpoint security architecture principles, standards, reference architectures, and technology patterns.
Architect and govern EDR/XDR solutions for large, geographically distributed, heterogeneous environments.
Define requirements for endpoint protection, telemetry, detection, prevention, isolation, remediation, and threat hunting.
Evaluate current endpoint security capabilities, develop target-state architectures, and recommend technologies based on effectiveness, scalability, operational impact, integrations, and cost of ownership.
Define integration requirements and patterns connecting EDR/XDR with SIEM, SOAR, IAM, vulnerability management, ITSM, cloud security, network security, SOC, and other enterprise platforms.
Establish patterns for onboarding business units, platforms, cloud workloads, and acquired environments into the endpoint security ecosystem.
Ensure endpoint security architecture supports Zero Trust and defense-in-depth strategies.
Define EDR/XDR deployment models, organizational structures, policy hierarchies, control frameworks, agent configurations, and endpoint segmentation standards.
Establish standards for agent lifecycle management, upgrades, configuration changes, platform enhancements, endpoint coverage, and agent health.
Evaluate endpoint telemetry, behavioral detection, threat hunting, automated response, remediation, isolation, rollback, and forensic investigation capabilities.
Review and approve significant EDR/XDR architecture, configuration, and policy changes from a security-risk perspective.
Develop endpoint detection and response strategies informed by threat intelligence and frameworks such as MITRE ATT&CK.
Partner with Security Operations and Incident Response teams to improve detection, response, threat hunting, and endpoint investigations.
Analyze emerging attack techniques, malware trends, persistence, lateral movement, and endpoint attack vectors; define controls to detect and mitigate them.
Participate in complex security investigations and provide architecture guidance during major incidents; conduct post-incident architecture reviews.
Define enterprise endpoint security baselines, hardened configuration requirements, and reference architectures for Windows, Linux, and macOS.
Define security requirements for endpoint management platforms and partner with endpoint engineering teams to incorporate controls into build and deployment processes.
Provide architecture guidance for vulnerability management, endpoint hardening, application control, attack-surface reduction, provisioning, lifecycle management, and decommissioning.
Establish standards for endpoint security exceptions, exclusions, risk acceptance, and compensating controls.
Ensure endpoint security architecture supports CIS benchmarks, organizational standards, audit requirements, and regulatory obligations.
Partner with enterprise and solution architects to integrate endpoint security into the broader enterprise security architecture.
Develop security architecture diagrams, data-flow diagrams, reference designs, and technical standards.
Evaluate security implications of new technologies, applications, infrastructure platforms, and cloud services.
Define requirements for security automation and orchestration and work with SOC and engineering teams to improve workflows and operational efficiency.
Establish endpoint security architecture governance and participate in architecture review boards and technology governance processes.
Assess risks, recommend technical controls and mitigating architectures, review exceptions, and support internal and external audits with architecture and control documentation.
Define endpoint security architecture metrics and key performance indicators and develop executive reporting on posture, maturity, and strategic initiatives.
Provide security architecture leadership for mergers, acquisitions, divestitures, and major technology transformations, including assessments, integration strategies, transition roadmaps, and oversight of large-scale initiatives.
Provide technical leadership and architectural direction to security engineers and infrastructure teams; mentor security professionals.
Lead vendor and service-provider discussions, architecture reviews, proofs of concept, technical evaluations, and design workshops.
Communicate complex technical risks and architecture decisions to technical teams and senior stakeholders.