Wealth Enhancement Group-posted 3 months ago
$160,000 - $180,000/Yr
Full-time • Senior
501-1,000 employees

Wealth Enhancement is an independent wealth management firm with an endless passion for enriching the lives of our clients. We continually seek to perfect our craft of personalized financial planning with our team-based Roundtable and UniFi processes that go far beyond the standard approach. We proudly provide unique financial plans and investment management services to over 80,000 households from our over 140 offices - and growing - nationwide. Since 1997, Wealth Enhancement has tirelessly raised the standard of wealth management with specialized knowledge and more attentive service that helps every client craft their future. We have an exciting opportunity for a Security Architect. The Cyber Security Program works with the Wealth Enhancement business community to secure data, systems, network resources, and protect the confidentiality, integrity and availability of our customers and company assets to ensure they are secure and in compliance with regulatory controls. We are seeking a highly skilled Security Architect to lead the design, implementation, and governance of security solutions across our on-prem and cloud infrastructure.

  • Develop processes, procedures, and policies required for the protection of confidential information
  • Identify risks to the security of data and systems
  • Mitigate these risks to levels acceptable to the business
  • Define security requirements, establish baselines and measure compliance, based on applicable laws, regulations, and best practices
  • Consult business users and departments to investigate security issues and evaluate products and processes
  • Design and implement secure, scalable, and compliant cloud architectures
  • Define guardrails for Identity and Access Management (IAM) security groups, encryption, logging and monitoring
  • Architect solutions that enforce Zero Trust, least privilege, and defense-in-depth models across multi-account cloud environments
  • Evaluate security tools and capabilities
  • Lead and support Cloud specific incident response (IR) efforts and investigations using native tools and logs
  • Work collaboratively across technology support teams
  • Ensure alignment with frameworks like NIST CSF, ISO 27001, SOC 2, SEC and FNRA as applicable
  • Develop and maintain documentation for security architecture, standards and procedures
  • Conduct regular risk assessment, cloud security posture reviews, and internal/external audits
  • Provide educational information for other team members on processes and steps to be followed
  • Integrate security controls and policies into CI/CD pipeline using IaaS tools (Terraform, CloudFormation)
  • Automate detection alerting, and response to suspicious activity with Cloud-native tools
  • Collaborate with DevSecOps to improve vulnerability management and remediation processes
  • Establish data security strategies for classification, encryption, and lifecycle management
  • Connect tools and teams while also automating manual processes to speed, scale and strengthen security response posture
  • Serve as a subject matter expert on-prem and cloud security architecture to both technical and business stakeholders
  • Partner with infrastructure architects, engineers, product owners, and legal/compliance teams to assess the security impact of new initiatives
  • Deliver enablement on cloud security best practices and threat trends across teams
  • Detect malicious activity within and across the cyber kill chain
  • Detect anomalous activity with advanced statistical analysis and machine learning capabilities
  • Communicate with executives and business leaders, translating technical risk into business impact
  • Bachelor's Degree in Computer Science, Information Management or equivalent work experience
  • Minimum of 7 years of work-related experience in Cyber Security, Security Engineering, Threat Intelligence and or Security Monitoring with at least 3 + years in cloud security architecture
  • Good verbal and written communication skills
  • Proficient with Microsoft Office Suite or related software
  • Deep expertise in AWS IAM, KMS, VPC, WAF, Config, CloudTrail, and Organizations
  • Cloud-native and third-party security tools (Windows Defender, Wiz, Akamai, F5)
  • Security automation and IaaS (Terraform, AWS CDK, or CloudFormation)
  • Container and serverless security (EKS, ECS, Lambda)
  • Familiarity with the concept of Least Privileged
  • Familiar with regularity controls such as SEC, GDPR, FNRA
  • Familiar with Security Control Frameworks such as NIST and ISO
  • Certifications preferred but not required: GIAC Security Architecture, CCSP, CISSP, AWS Certified Security Specialty, Azure Security Engineer Associate, or equivalent work experience
  • Training and professional development
  • Medical, dental and vision coverage (Available to employees and their families)
  • Health Savings Account (HSA) with employer contribution and Flexible Spending Accounts (FSA) for medical, dependent, and transit expenses
  • Life and AD&D insurance – employer paid and voluntary options
  • Short-term and long-term disability, workers compensation – employer paid
  • 401k with match and profit sharing
  • Wellness programs and resources
  • Voluntary benefits, including pet insurance
  • 18 days of paid time off (PTO), accrued annually (25 PTO days after 4 years of service)
  • 12 paid holidays each year (10 pre-determined and 2 floating days)
  • Paid parental leave and paid caregiver leave (Caregiver leave available after 6 months of tenure)
  • Reimbursement for tuition, licensing, and other credentials (Available after meeting service requirements)
© 2024 Teal Labs, Inc
Privacy PolicyTerms of Service