senior cybersecurity architect

Starbucks • Seattle, WA

6d • Onsite

About The Position

This role contributes to Starbucks success by safeguarding information and systems assets against unauthorized use, disclosure, modification, damage, or loss. The group provides services to protect the value and use of information through collaboration, standardization, enforcement, and education across the Company. Security Architecture uses risk frameworks and methodologies to assess technology risk, evaluate technology providers, review trends, threats, and solutions. We use these assessments to inform decision making, establish, and interpret cybersecurity policies and standards, and provide implementation guidance to manage risk. This role will deliver security architecture expertise, and best practices oversight across complex multi-cloud, multi-partner environments. It entails deep-level architecture reviews, crafting advisory and design reference architectures and secure design patterns. The end goal drives Starbucks Technology into compliance with standards, policies, and applicable regulations globally.

Requirements

• Minimum of 7+ years working in cybersecurity related field.
• 3 years demonstrated experience in cybersecurity and a total minimum of 7 years in information technology or related field.
• Demonstrated knowledge of: cybersecurity frameworks (e.g., NIST, ISO, CSA), policies, design principles, practices and enabling tools.
• Formal risk assessment documentation
• Threat modeling
• Public cloud services (AWS, Azure, GCP, etc.) and serverless and containerized environments.
• Encryption, authentication/authorization, API security, secrets best practices.
• IaC (Infrastructure as Code) and supporting technologies
• General security threats, attack vectors, and vulnerabilities - ability to act as SME on threat modeling.
• Architecture tools, patterns, serverless ecosystems, pipeline security.
• Able to use critical and logical thinking to prioritize work that drives the most impact to overall security posture and risk management.
• Exceptional written and verbal communication skills.
• Ability to establish cross-functional, collaborative relationships with business and technology partners.
• Demonstrated ability to work in a challenging, dynamic, and fast-paced environment with limited supervision.
• Candidate should be able to succeed in both independent and collaborative work scenarios.

Nice To Haves

• Certifications such as CISSP, CISM, CIPM or others focused on information security, data privacy or information risk management are desired.

Responsibilities

• Ensure delivery of a world class cybersecurity program.
• Develop reference architectures that can be used to solve common requirements or mitigate trends in security findings in a repeatable way following (and identifying) recommended best practices.
• Lead threat modeling and partner with technical delivery teams to integrate security requirements and practices into solutions.
• Drive security architecture reviews of platforms & applications in complex multi-tenant, multi-provider, and vendor-cloud environments.
• Provide consultative services and guidance for tech builders during technical design of solutions.
• Inspire and influence others to achieve results – Partner with engineering and delivery teams to help enable strategic platform initiatives.
• Proactively manage oversight and pace for the architecture reviews and promptly address any critical issues that may create risk.
• Be accountable for the quality and successful outcome of the work – Ensure assessments are known, documented, and properly performed to produce consistent, timely, high-quality deliverables.
• Develop and maintain technical proficiency and related certifications for core products and solution areas.
• Enjoy working on an energetic, fun team and have a clear ability to drive the business forward as part of a highly collaborative team, while acting in accordance with Starbucks guiding principles and values.

Benefits

• medical, dental, vision, basic and supplemental life insurance, and other voluntary insurance benefits.
• short-term and long-term disability
• paid parental leave
• family expansion reimbursement
• paid vacation from date of hire
• sick time (accrued at 1 hour for every 25 hours worked)
• eight paid holidays
• two personal days per year.
• 401(k) retirement plan with employer match
• discounted company stock program (S.I.P.)
• Starbucks equity program (Bean Stock)
• incentivized emergency savings
• financial well-being tools.
• 100% upfront tuition coverage for a first-time bachelor’s degree through Arizona State University’s online program via the Starbucks College Achievement Plan
• student loan management resources
• access to other educational opportunities.
• backup care
• DACA reimbursement.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed