Security Architect - Vulnerability Exposure Management

Edward Jones

12d•Hybrid

About The Position

The Vulnerability Exposure Architect will work at the direction of and with support from the Team Lead and peers to identify, triage, analyze, and manage vulnerabilities across the Firm's enterprise environment. This will include supporting core aspects of the vulnerability management, configuration management, posture management, penetration testing, security assessments, and vulnerability management. In the role, the Solutions Engineer will contribute to the development and maintenance of vulnerability management within the role and look to suggest opportunities for improvement. The Solutions Engineer will have reached proficiency for work and tasks within the assigned role and be able to collaborate and communicate clearly with stakeholders across the Firm.

Requirements

Bachelor’s degree in Computer Science, Engineering, Management Information Systems, or related work experience.
Minimum 15 years of experience across multiple technology areas preferred, with at least 3 years directly related to information security.
Minimum 3 years of relevant architecture experience across on-premises, cloud, and hybrid environments.
Subject matter expert in infrastructure, systems management, cloud platforms, and security technologies.
Designs IT architecture solutions supporting Firm strategies and security objectives.
Develops secure designs supporting vulnerability, configuration, posture management, penetration testing, and security assessments.
Defines cloud security standards, guardrails, configuration baselines, and governance across cloud and hybrid environments.
Solves critical technical challenges requiring immediate analysis, coordination, and resolution.
Analyzes requirements, security risks, feasibility, costs, benefits, and functional requirements.
Performs root cause analysis using industry-standard tools to identify systemic issues and remediation actions.
Serves as technical lead for team systems, processes, and related or dependent technologies.
Defines KPIs, dashboards, and reporting for risk exposure, remediation, compliance, and security posture.
Promotes automation and tool integration to improve security visibility, prioritization, remediation, and reporting.
Leads cross-functional teams in vulnerability prioritization, remediation, assessments, and continuous improvement.
Partners with application, infrastructure, cloud, and risk teams to establish ownership and remediation accountability.
Evaluates security tools and emerging technologies for risk, scalability, integration, and business value.
Builds team capabilities through technical leadership, training, mentoring, and knowledge sharing.

Responsibilities

Maintain knowledge and understanding in support of comprehensive exposure detection, mitigation, and remediation efforts.
Maintain knowledge and understanding of current security threats and vulnerabilities and of how threat actors can misuse different types of exposures within an attack path.
Utilize a combination of vulnerability/configuration/posture scanning tools, penetration tests, and third-party assessments to identify potential points of exposure across the Edward Jones enterprise environment.
Contribute to the team's processes and documentation by suggesting opportunities to incorporate industry best practices and lessons learned.