Cyber Security Architect

Princeton, NJ, US • Posted 12 hours ago • Updated 12 hours ago
Full Time
On-site
Fitment

Dice Job Match Score™

🔢 Crunching numbers...

Job Details

Skills

  • Cyber Security

Summary

Job Title: Cyber Security Architect
Location: Princeton, NJ & NYC, NY (Hybrid)
Key responsibilities:
  • Define and maintain the organization's cybersecurity strategy, principles, standards, and reference architectures.
  • Design secure architectures for enterprise applications, networks, cloud platforms, APIs, data platforms, and infrastructure.
  • Translate business, regulatory, and technical requirements into security controls and architecture patterns.
  • Conduct threat modelling, attack-surface analysis, security risk assessments, and architecture reviews.
  • Identify vulnerabilities, design gaps, single points of failure, and risks introduced by new technologies or system integrations.
  • Define security controls for confidentiality, integrity, availability, authentication, authorization, monitoring, and data protection.
  • Establish defense-in-depth strategies covering identity, network, endpoint, application, data, and cloud security.
  • Review solution designs, technical specifications, infrastructure-as-code, and implementation plans for security compliance.
  • Guide development and engineering teams in secure design, secure coding, DevSecOps, and security testing practices.
  • Design and govern identity and access management solutions, including SSO, MFA, RBAC, ABAC, PAM, and zero-trust controls.
  • Define security requirements for firewalls, WAF, VPN, IDS/IPS, SIEM, EDR, DLP, secrets management, and endpoint protection.
  • Develop cloud-security architectures for AWS, Azure, or Google Cloud environments.
  • Establish security logging, monitoring, alerting, detection, and incident-response requirements.
  • Support vulnerability assessments, penetration testing, configuration reviews, and remediation planning.
  • Assist incident-response and business-continuity teams during major security events.
  • Evaluate security products, technologies, vendors, and managed security services.
  • Maintain security architecture documentation, standards, diagrams, risk registers, and control mappings.
  • Support audits and compliance initiatives involving ISO 27001, SOC 2, PCI DSS, GDPR, HIPAA, or applicable regulatory frameworks.
  • Track changes in the threat landscape and update security controls and architecture accordingly.coursera+2
Required qualifications:
  • 8 12 years of experience in cybersecurity, information security, infrastructure security, cloud security, or security architecture.
  • 3+ years of experience designing and reviewing enterprise security architectures.
  • Strong knowledge of network security, application security, cloud security, IAM, cryptography, and security operations.
  • Experience with threat modelling frameworks such as STRIDE, MITRE ATT&CK, or equivalent methodologies.
  • Strong understanding of security principles including least privilege, zero trust, defense in depth, secure-by-design, and separation of duties.
  • Experience conducting security risk assessments and developing risk-treatment plans.
  • Hands-on knowledge of security controls, vulnerabilities, penetration testing, incident response, and disaster recovery.
  • Experience working with architecture frameworks, security policies, control standards, and governance processes.
  • Strong communication skills, with the ability to explain complex security risks to technical and business stakeholders.
  • Demonstrated ability to influence engineering teams and drive security improvements across projects.
Preferred qualifications:
  • Experience securing AWS, Azure, or Google Cloud environments.
  • Knowledge of Kubernetes, containers, service meshes, serverless systems, and cloud-native architectures.
  • Experience with DevSecOps tools, CI/CD security, SAST, DAST, SCA, IaC scanning, secrets scanning, and container security.
  • Familiarity with SIEM, SOAR, EDR, XDR, WAF, CSPM, CNAPP, DLP, and vulnerability-management platforms.
  • Experience with API security, microservices security, OAuth 2.0, OpenID Connect, SAML, and JWT.
  • Knowledge of data classification, encryption, tokenization, key management, and privacy engineering.
  • Experience with security automation using Python, PowerShell, Terraform, or similar tools.
  • Familiarity with AI/ML security, LLM application security, prompt injection, data leakage, and model governance.
  • Experience with regulatory and security frameworks such as NIST CSF, NIST SP 800-53, CIS Controls, ISO 27001, SABSA, COBIT, and OWASP.
  • Professional certifications such as CISSP, CCSP, SABSA, CISM, GIAC, AWS Security Specialty, or Azure Security Engineer.
Employers have access to artificial intelligence language tools (“AI”) that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.
  • Dice Id: 10106248
  • Position Id: 2026-4424
  • Posted 12 hours ago
Create job alert
Set job alertNever miss an opportunity! Create an alert based on the job you applied for.

Similar Jobs

Princeton, New Jersey

Today

Easy Apply

Full-time, Third Party

$190000 - $200000

Hybrid in Princeton, New Jersey

Today

Easy Apply

Full-time

150 - 190

Berkeley Heights, New Jersey

9d ago

Full-time

USD 168,500.00 - 271,200.00 per year

Hybrid in New York, New York

Today

Easy Apply

Full-time

Depends on Experience

Search all similar jobs