Senior Security Technical Architect

Edward Jones • Tempe, AZ

130d

About The Position

The Senior Security Architect is responsible for ensuring that the security requirements necessary to protect the Firm's business systems and processes are adequately considered and addressed across their portfolio. The Senior Security Architect will have a broad understanding of Edward Jones's enterprise technology systems as well as a deep understanding of their technology portfolio and of the cyber threat landscape. They will be responsible for using threat modeling techniques combined with security patterns and security requirements to ensure any systems or processes implemented are resilient to cyber attacks. During the course of operations, the Senior Security Architect will be responsible for identifying and escalating potential security risks to their leader and to work to identify and implement remediation solutions. It is expected that the Senior Security Architect will collaborate with associates within Security and across Digital. The Senior Security Architect will work with minimal guidance and oversight to deliver on assigned work and are accountable for complex problem solving and authoritative decision making within provided guidelines. The Senior security architect will provide mentorship to Security Architects.

Requirements

• 8+ years relevant cyber security experience in progressive roles; 11+ preferred
• Degree in Cyber Security, Computer Science, Computer Engineering, Information Systems or related field
• Completed a number of advanced training and certifications (SANS SEC699, SANS SEC598, SANS LDR553, SANS FOR608, SANS SEC599, Cloud, etc)
• Experience with core enterprise technology platforms including: security tools, infrastructure, software, data, cloud and cloud native platforms, microservices, API management, event streaming, CI/CD pipelines
• Experience with core enterprise best practices, including: security risk management, architecture diagrams and documentation, digital transformation, change management, crisis management, business continuity, disaster recovery, and observability
• Demonstrated competency in supporting existing software or hardware environments, project leadership, designing technical solutions, large implementations to production environments, multi-national systems, process design, team building, mid and long range planning
• Demonstrated competency with reading and generating architectural diagrams
• Demonstrated competency in architecting software security standards and implementation requirements
• Deep and extensive understanding of current security threats and vulnerabilities
• Deep and extensive understanding of how threat actors execute common attack paths at the tactics, techniques and procedures level
• Demonstrated competency with secure system design and domain risk modelling
• Experience managing regulatory requirements and common frameworks used by security within the Financial Industry
• Experience working with Product Teams and Agile methodology and practices

Responsibilities

• Architect, design and support delivery of enterprise solutions that prioritize security while also considering resiliency, maintainability, ease of integration and cost-effectiveness
• Guide and mentor teams on secure architecture and design, keeping operational readiness, scalability and resiliency in mind
• Drive and ensure adoption of security architectural patterns, design policies, code quality and performance across initiatives
• Drive innovation and R&D initiatives to solve complex business problems and support changing technical landscape in a secure manner
• Conduct regular reviews and assessments to ensure the solution meets security standards and regulatory requirements
• Interface and communicate at peer and more senior levels of the organization, leading and driving decisions through influence and consensus building
• Collaborate with stakeholders to understand business requirements, assess business processes, and develop comprehensive and secure technical solutions for complex environments
• Continue to maintain knowledge of new and emerging cyber threats including tactics, techniques, and procedures
• Identify and escalate potential security risks to leadership and work with leadership to design and implement the appropriate remediations
• Work with the exposure management team to ensure prioritized remediation of vulnerabilities, misconfigurations, and other security control gaps within the assigned portfolio

Benefits

• Medical and prescription drug coverage
• Dental and vision insurance
• Voluntary benefits (such as accident, hospital indemnity, and critical illness)
• Short- and long-term disability coverage
• Basic life and basic AD&D coverage provided at no cost to associates
• 401k retirement plan
• Health savings account and flexible spending account
• Ten paid holidays
• Fifteen days of vacation for new associates beginning on January 1 of each year
• Sick time and personal days
• Paid day for volunteerism
• Eligibility for bonuses and profit sharing
• Employee Assistance Program

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Industry: Securities, Commodity Contracts, and Other Financial Investments and Related Activities
• Education Level: Bachelor's degree