Senior Solutions Architect | Vulnerability/Exposure Management (Remote)

Trace3 • Dallas, TX

6d • $175,000 - $200,000 • Remote

About The Position

The Senior Solutions Architect, Security Operations, provides architect-level thought leadership and expertise in vulnerability and exposure management. The role helps organizations transition from traditional vulnerability scanning and reporting to continuous, risk-driven exposure management programs that integrate people, processes, and technology to measurably reduce cyber risk.

Under Security Operations leadership, this client-facing presales architect leads Trace3’s most complex client engagements, from discovery and assessment through solution design and executive readout. The position also turns client work into reference architectures, repeatable offerings, and enablement for regional technical teams. It collaborates across the Security Operations practice and provides secondary support in adjacent areas such as SOC modernization, SIEM/XDR, threat detection and response, and AI-enabled security operations.

Requirements

• Bachelor’s degree in Computer Science, Cybersecurity, Information Security, Engineering, or a related discipline, or equivalent measurable knowledge and experience gained through industry, military, defense, or government operations.
• At least 8 years of cybersecurity experience, including significant hands-on experience designing, implementing, operating, or modernizing enterprise vulnerability or exposure management programs beyond product implementation alone.
• Experience in a customer-facing presales, solutions architecture, or technology consulting role within a VAR, systems integrator, consultancy, or technology vendor.
• Deep technical expertise in enterprise vulnerability management, risk-based prioritization, CTEM principles, exposure assessment, and remediation lifecycle management.
• Experience with enterprise vulnerability and exposure management technologies; deep expertise in at least one major platform and working familiarity with others is preferred.
• Ability to design target-state vulnerability and exposure management architectures, including platform consolidation, technology integration, program modernization, and scalable operating models.
• Experience developing or operating enterprise vulnerability management programs, including asset discovery and ownership, identification, findings normalization, prioritization, remediation tracking, exception management, and executive reporting.
• Strong working knowledge of CVSS, EPSS, CISA KEV, and SSVC, and ability to incorporate threat intelligence, exploitability, and business context into remediation decisions.
• Familiarity with EASM, CAASM, attack path analysis, breach and attack simulation, and adversarial validation.
• Experience integrating vulnerability and exposure management platforms with CMDB, ITSM, SOAR, cloud security platforms, and security analytics solutions.
• Working knowledge and experience with AWS, Azure, and GCP, including cloud workload and container security, native security tooling, and cloud vulnerability and exposure management.
• Practical understanding of automation, orchestration, and AI-assisted security capabilities and their application to prioritization, remediation workflows, threat intelligence enrichment, and reporting.
• Working knowledge of SIEM/SOAR, EDR/XDR, threat detection and response, and SOC operations, with the ability to collaborate on cross-domain architecture and provide secondary technical support.
• Understanding of how vulnerability and exposure intelligence integrates with platforms such as CrowdStrike, Palo Alto Networks Cortex XSIAM, Microsoft Sentinel, Splunk, or Google SecOps.
• Working knowledge of cybersecurity principles, frameworks, and standards, including NIST CSF, NIST SP 800-40, CIS Controls, MITRE ATT&CK, ISO 27001, and CTEM-aligned frameworks.
• Ability to conduct technical workshops, security assessments, architectural reviews, and executive briefings, translating technical findings into actionable recommendations and business outcomes.
• Knowledge and experience creating and maintaining technical documentation, presentations, architectural designs, implementation plans, proposals, SOWs, and strategic roadmaps.
• Strong executive communication, interpersonal, collaboration, and customer presentation skills.
• Self-starter with strong problem-solving abilities and confidence working directly with customers on complex security challenges.
• Highly organized and detail-oriented, with strong time management and prioritization skills in a fast-paced, evolving environment.
• Comfort managing multiple and changing priorities while meeting deadlines in an entrepreneurial environment.
• Ability to travel when needed, approximately 25–35%, and hold a valid driver’s license.

Nice To Haves

• Deep expertise in one major vulnerability or exposure management platform and working familiarity with other platforms such as Tenable, Qualys, Rapid7, CrowdStrike Falcon Exposure Management, Wiz, Axonius, or XM Cyber.
• Certifications such as CISSP, CCSP, GIAC, or relevant cloud security and vendor architecture certifications.
• Prior experience developing packaged service offerings, reference architectures, assessment methodologies, technical playbooks, or certification and enablement programs.

Responsibilities

• Lead complex client engagements for vulnerability management modernization, CTEM program development, exposure management architecture, and risk-based remediation strategies, from discovery through solution design and executive readout.
• Assess clients’ vulnerability and exposure management capabilities, technologies, processes, and operational maturity, and recommend improvements aligned with business risk and measurable outcomes.
• Design target-state architectures integrating vulnerability scanning, EASM/CAASM, cloud and container security, identity exposure, and attack path analysis.
• Develop and operationalize CTEM programs for continuous exposure discovery, prioritization, validation, and remediation, with clear governance, accountability, and continuous improvement.
• Define risk-based vulnerability prioritization methods incorporating CVSS, EPSS, CISA KEV, threat intelligence, asset criticality, exploitability, compensating controls, and business context.
• Architect operating models covering asset ownership, remediation workflows, SLAs, exception management, risk acceptance, executive reporting, and integration with IT, infrastructure, cloud, and application teams.
• Design automation and orchestration workflows for findings normalization, enrichment, remediation ticketing, workflow integration, and closed-loop validation.
• Evaluate AI-assisted and agentic capabilities for vulnerability and exposure management, including prioritization, findings correlation, remediation recommendations, and reporting, with appropriate governance and human oversight.
• Incorporate threat-informed validation, such as attack path analysis, breach and attack simulation, penetration testing, and purple-team findings, to validate severity and guide remediation.
• Collaborate with SOC/SIEM architects to integrate vulnerability and exposure intelligence with detection and response platforms.
• Develop and maintain reference architectures, assessment methodologies, solution briefs, packaged offerings, and delivery playbooks, contributing to Security Operations practice development.
• Collaborate with Security Solutions practices, regional teams, Managed Services, and Service Delivery to scope, design, and transition engagements.
• Serve as a senior technical counterpart to strategic security technology partners, supporting joint solution development, technical enablement, and go-to-market initiatives.
• Support qualified opportunities through technical discovery, architecture, competitive positioning, proposals, SOWs, effort estimates, and technical validation.
• Deliver technical enablement, workshops, and knowledge-sharing sessions for regional architects, sellers, and delivery teams; mentor junior architects and early-career practitioners.
• Maintain working knowledge of adjacent Security Operations domains and provide secondary architectural and presales support as needed.
• Represent Trace3 in customer executive briefings, partner engagements, industry events, thought leadership, and technical presentations.

Benefits

• Comprehensive medical, dental, and vision plans for employees and dependents.
• 401(k) retirement plan with employer match.
• 529 College Savings Plan.
• Health Savings Account.
• Life insurance.
• Long-term disability.
• Competitive compensation.
• Training and development programs.
• Major offices stocked with snacks and beverages.
• Collaborative culture.
• Work-life balance and generous paid time off.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior