Cyber Security Architect, Amber Labs

• Must hold current active SC Clearance
• Experience: 5+ years in cyber security, with a strong focus on architecture and design
• Technical Knowledge: Expertise in firewalls, IDS/IPS, SIEMs, endpoint protection, and encryption technologies
• Cloud Security: Proficient in securing cloud platforms (e.g., AWS, Azure, Google Cloud)
• Standards and Frameworks: Familiarity with NIST, CIS, ISO 27001, and other security standards
• Certifications (preferred): CISSP, CISM, CISA, SABSA, TOGAF
• Soft Skills: Strong analytical, communication, and problem-solving skills

Desirable

• We are seeking an experienced Cyber Security Architect with active security clearance to lead the development, design, and implementation of security solutions across various projects
• The successful candidate will be responsible for ensuring that robust and effective security measures are in place to safeguard critical infrastructure, sensitive data, and applications
• Security Strategy and Architecture: Develop and implement security strategies aligned with industry standards and best practices, ensuring all systems are secure by design
• Risk Management: Assess risks, identify vulnerabilities, and create threat models for new and existing systems to prioritize security controls
• Compliance and Governance: Ensure solutions comply with regulatory and organizational security standards (e.g., NIST, ISO 27001, GDPR)
• Solution Design: Lead the design and architecture of security solutions, including identity and access management, data protection, network security, and application security
• Technical Leadership: Collaborate with cross-functional teams (developers, DevOps, infrastructure) to integrate security into all stages of the development lifecycle
• Security Assessment: Conduct security assessments, penetration tests, and vulnerability scans, and work with teams to remediate findings
• Incident Response: Develop incident response plans, coordinate responses to security incidents, and drive improvements from lessons learned
• Stakeholder Management: Communicate security requirements and risks to both technical and non-technical stakeholders, ensuring alignment with business goals

• Our Talent Acquisition Team will be in touch to advise you on the next steps
• We have a two-stage interview process for most of our consultants
• In certain cases, we may include a third and final stage, which is a conversation with the company Partners. This will only be considered if deemed necessary