Senior Solutions Architect | Vulnerability/Exposure Management (Remote)

Trace3 • Dallas, TX

6d • Remote

About The Position

The Senior Solutions Architect, Security Operations is a client-facing presales architect responsible for providing technical leadership across vulnerability and exposure management. The role helps organizations transition from traditional vulnerability scanning and reporting to continuous, risk-driven exposure management programs that integrate people, processes, and technology to measurably reduce cyber risk. Under the direction of Security Operations leadership, this architect leads complex client engagements and turns their outcomes into reusable architectures, offerings, and enablement for Trace3's regional teams. The role also collaborates across the broader Security Operations practice and provides secondary support for adjacent capabilities such as SOC modernization, SIEM/XDR, threat detection and response, and AI-enabled security operations.

The architect assesses organizational capabilities and maturity, designs target-state architectures, develops Continuous Threat Exposure Management (CTEM) programs, and establishes risk-informed remediation and operational practices. The work spans vulnerability discovery and prioritization, attack surface and cloud exposure, attack path analysis, remediation workflows, validation, reporting, automation, and AI-assisted capabilities with appropriate governance and human oversight.

The role supports account teams through discovery, solution design, competitive positioning, proposals, statements of work, effort estimation, and technical validation. It also develops reusable delivery materials, enables and mentors technical teams, works with strategic technology partners, and represents Trace3 in customer and industry engagements. Travel may be required, approximately 25–35%.

Requirements

• Bachelor's degree in Computer Science, Cybersecurity, Information Security, Engineering, or a related discipline, or equivalent measurable knowledge and experience gained through industry, military, defense, or government operations.
• At least 8 years of cybersecurity experience, including significant hands-on experience designing, implementing, operating, or modernizing enterprise vulnerability or exposure management programs beyond product implementation alone.
• Experience in a customer-facing presales, solutions architecture, or technology consulting role within a VAR, systems integrator, consultancy, or technology vendor.
• Deep technical expertise in enterprise vulnerability management, risk-based vulnerability prioritization, CTEM principles, exposure assessment, and remediation lifecycle management.
• Experience with enterprise vulnerability and exposure management technologies such as Tenable, Qualys, Rapid7, CrowdStrike Falcon Exposure Management, Wiz, Axonius, or XM Cyber.
• Ability to design target-state vulnerability and exposure management architectures, including platform consolidation, technology integration, program modernization, and scalable operating models.
• Experience developing or operating enterprise vulnerability management programs, including asset discovery and ownership, vulnerability identification, findings normalization, prioritization, remediation tracking, exception management, and executive reporting.
• Working knowledge of CVSS, EPSS, CISA KEV, and SSVC, and ability to incorporate threat intelligence, exploitability, and business context into remediation decisions.
• Familiarity with EASM, CAASM, attack path analysis, breach and attack simulation, and adversarial validation.
• Experience integrating vulnerability and exposure management platforms with CMDB, ITSM, SOAR, cloud security, and security analytics systems.
• Working knowledge and experience with AWS, Azure, and GCP, including cloud workload security, container security, native security tooling, and cloud vulnerability and exposure management.
• Practical understanding of automation, orchestration, and AI-assisted security capabilities and their use in prioritization, remediation workflows, threat intelligence enrichment, and reporting.
• Working knowledge of SIEM/SOAR, EDR/XDR, threat detection and response, and SOC operations, with the ability to collaborate on cross-domain architecture and provide secondary technical support.
• Understanding of how vulnerability and exposure intelligence integrates with platforms such as CrowdStrike, Palo Alto Networks Cortex XSIAM, Microsoft Sentinel, Splunk, or Google SecOps.
• Working knowledge of cybersecurity principles, frameworks, and standards, including NIST CSF, NIST SP 800-40, CIS Controls, MITRE ATT&CK, ISO 27001, and CTEM-aligned frameworks.
• Ability to conduct technical workshops, security assessments, architectural reviews, and executive briefings, translating complex findings into actionable recommendations and business outcomes.
• Knowledge and experience creating and maintaining technical documentation, presentations, architectural designs, implementation plans, proposals, SOWs, and strategic roadmaps.
• Strong executive communication, interpersonal, collaboration, customer presentation, and problem-solving skills.
• Self-starter who is organized, detail-oriented, able to manage multiple changing priorities, and comfortable working in a fast-paced entrepreneurial environment.
• Ability to travel when needed, approximately 25–35%, and hold a valid driver's license.

Nice To Haves

• Deep expertise in one major vulnerability or exposure management platform and working familiarity with others.
• CISSP, CCSP, GIAC, or relevant cloud security and vendor architecture certifications.
• Experience developing packaged service offerings, reference architectures, assessment methodologies, technical playbooks, or certification and enablement programs.

Responsibilities

• Lead complex client engagements in vulnerability management modernization, CTEM program development, exposure management architecture, and risk-based remediation, from discovery through solution design and executive readout.
• Assess client technologies, processes, capabilities, and operational maturity, and deliver recommendations aligned with business risk, security objectives, and measurable outcomes.
• Design target-state architectures integrating vulnerability scanning, EASM/CAASM, cloud and container security, identity exposure, and attack path analysis.
• Develop and operationalize CTEM programs for continuous exposure discovery, prioritization, validation, and remediation, with governance, accountability, and continuous improvement.
• Define risk-based vulnerability prioritization methods using scoring, threat intelligence, asset criticality, exploitability, compensating controls, and business context.
• Architect operating models covering asset ownership, remediation workflows, SLAs, exception management, risk acceptance, executive reporting, and coordination with IT, infrastructure, cloud, and application teams.
• Design automation and orchestration workflows for findings normalization and enrichment, remediation ticketing, workflow integration, and closed-loop remediation validation.
• Evaluate and incorporate AI-assisted and agentic capabilities, including prioritization, findings correlation, remediation recommendations, and reporting, with governance and human oversight.
• Use threat-informed validation techniques, including attack path analysis, breach and attack simulation, penetration testing, and purple-team findings, to validate exposure severity and measure improvements.
• Collaborate with SOC/SIEM architects to integrate exposure intelligence with detection and response platforms.
• Develop and maintain reference architectures, assessment methodologies, solution briefs, packaged offerings, and delivery playbooks.
• Collaborate with Security Solutions practices, regional teams, Managed Services, and Service Delivery to scope, design, and transition engagements.
• Serve as a senior technical counterpart to security technology partners and support joint solution development, technical enablement, and go-to-market initiatives.
• Support account teams with technical discovery, architecture, competitive positioning, proposals, SOWs, effort estimation, and technical validation.
• Deliver technical enablement, workshops, and knowledge-sharing sessions; mentor junior architects and early-career practitioners.
• Maintain working knowledge of adjacent Security Operations domains and provide secondary architectural and presales support as needed.
• Represent Trace3 through customer executive briefings, partner engagements, industry events, thought leadership, and technical presentations.

Benefits

• Comprehensive medical, dental, and vision plans for employees and dependents.
• 401(k) retirement plan with employer match.
• 529 College Savings Plan.
• Health Savings Account.
• Life insurance.
• Long-term disability.
• Competitive compensation.
• Training and development programs.
• Major offices stocked with snacks and beverages.
• Collaborative and cool culture.
• Work-life balance and generous paid time off.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior