10601 - Sr. Manager, Security Architecture & Engineering

Hyundai Autoever America•Irvine, CA

6d•$181,240 - $259,160•Onsite

About The Position

The Senior Manager, Security Architecture & Engineering owns the enterprise security reference architecture, secure-by-design standards, and the engineering and lifecycle management of security controls and tooling across cloud, network, endpoint, identity, data, and application environments. This leader manages a team of security architects and engineers and partners closely with Infrastructure, Cloud, Application Security, SOC/Incident Response, and Governance, Risk & Compliance teams to design, build, and operate solutions that protect the availability, integrity, and confidentiality of company information resources. The role also advises the organization on emerging security technologies and architectural patterns. The position defines and maintains a multi-year security architecture roadmap and target state aligned with control frameworks and principles such as Zero Trust, cloud security, identity and access management, network segmentation, and detection tooling. The Senior Manager sets technology standards for the security stack and leads team hiring, mentoring, performance development, workload prioritization, and delivery.

Requirements

Bachelor's degree or equivalent, with major coursework in computer science or a related field.
At least 10 years of progressive experience in computing and security.
At least 5 years of experience leading security architecture or security engineering teams.
Experience designing and implementing enterprise security architecture across hybrid and multi-cloud environments, including AWS and Azure, as well as network, identity, endpoint, SIEM, EDR/MDR, and application security domains in multi-platform environments.
Hands-on knowledge of Zero Trust, DevSecOps, secure software development lifecycle practices, automation, and infrastructure-as-code.
Experience with security assessments and incident response in a dynamic IT environment.
Knowledge of disaster recovery and business continuity planning.
Knowledge of preventive, detective, and corrective controls, including principles and techniques associated with system compromise and denial-of-service incidents and the tools used to detect and prevent them.
Knowledge of information security issues, requirements, trends, and applicable laws.

Nice To Haves

CISSP (Certified Information Systems Security Professional).
Architecture and technical certifications such as CISSP-ISSAP, CCSP, SABSA, or TOGAF.
Cloud security certifications such as AWS Certified Security - Specialty, Microsoft Certified: Azure Security Engineer Associate, or Microsoft Certified: Cybersecurity Architect Expert (SC-100).

Responsibilities

Own enterprise and solution security architecture, including threat modeling, architecture and design reviews, and reference architectures for cloud, network segmentation, identity, endpoint, data protection, and application security.
Lead the engineering and implementation of security solutions and own the technology lifecycle and roadmap for security controls and tooling, with measurable goals for coverage, modernization, and retirement of legacy technologies.
Translate approved policy into technical security standards, baselines, and reference architectures; chair or participate in the architecture review board; and manage exception and risk-acceptance processes for technical deviations.
Support the development of security policies, standards, procedures, and related documentation.
Gather and organize technical information regarding the organization’s mission, goals, needs, existing security products, and ongoing information security programs.
Interpret regulatory and framework requirements, including NIST CSF, NIST SP 800-53, ISO 27001, CIS Controls, PCI, and CCPA, into technical control requirements and architecture decisions.
Implement automated control enforcement and compliance-as-code, and provide technical evidence and control telemetry to GRC.
Conduct security design assessments, architecture gap analyses, and control validation for engineered solutions, and lead remediation of identified findings.
Review application and system development plans from an information security perspective and provide recommendations and corrective guidance.
Design and engineer identity and access architecture, including IAM, PAM, MFA, conditional access, least privilege, and Zero Trust models.
Participate in and support third-party audit activities.
Prepare and manage security reports, status updates, project presentations, executive summaries, and related documentation.
Participate in the preparation of disaster recovery and business continuity plans for information systems.
Lead team hiring, mentoring, performance development, workload prioritization, and delivery.