IT Compliance and Security Engineer
Job Description
We are seeking a hands-on Security Architect to design, implement, and maintain secure enterprise architectures across both cloud and on-premise environments. The ideal candidate will have strong technical depth, proven experience in cloud security, and a strategic mindset for aligning security initiatives with business and compliance goals.
You will collaborate closely with SOC, cloud, infrastructure, and engineering teams to enhance the organization’s detection, prevention, and response capabilities. The role involves building and integrating security frameworks, conducting risk assessments, and ensuring security best practices are embedded throughout the DevOps lifecycle.
Key Responsibilities
- Design and implement secure enterprise architectures across cloud and on-prem environments.
- Conduct threat modeling, risk assessments, and security reviews of new and existing systems.
- Integrate security into DevOps pipelines to ensure secure software development practices.
- Strengthen detection, prevention, and response capabilities by collaborating with SOC and engineering teams.
- Lead network segmentation and data protection initiatives.
- Oversee vulnerability management and coordinate remediation efforts.
- Automate security controls and processes to improve efficiency and consistency.
- Support compliance activities including ISO 27001, SOC 2, and NIST 800-53 by providing technical evidence and remediating audit findings.
- Establish and maintain architecture governance standards for security controls across all platforms.
- Advise leadership and project teams on emerging threats and evolving best practices in information security.
Key Security Tools & Platforms
- Cloud Security: AWS GuardDuty, Azure Security Center, GCP Security Command Center
- Vulnerability Management: Qualys, Rapid7, Tenable
- Endpoint & Detection: CrowdStrike, SentinelOne, Microsoft Defender
- SIEM/SOAR: Splunk, IBM QRadar, Azure Sentinel
- Network & Web Security: Palo Alto, Zscaler, Akamai WAF
- Identity & Access Management: CyberArk, Okta, Azure AD
Qualifications & Requirements
- Bachelor’s or Master’s degree in Computer Science, Information Security, or a related field.
- 7+ years of experience in information security, with at least 3 years in a security architecture role.
- Strong understanding of cloud security architectures (AWS, Azure, GCP).
- Hands-on experience with enterprise-grade security tools and frameworks.
- Knowledge of regulatory and compliance standards such as ISO 27001, SOC 2, and NIST 800-53.
- Experience with incident response, vulnerability management, and secure network design.
- Ability to translate complex security requirements into practical technical solutions.
- Excellent communication and stakeholder management skills.
