Cyber Security Architect

Job Title: Cyber Security Architect

Location: Jersey City, NJ

Employment Type: Full-time

Job Description:

Cyber Security Architect

Must Have Technical/Functional Skills

10+ years of IT experience with strong expertise in Cyber Security, Application Security and enterprise security architecture.

Proven experience designing secure architectures for web applications, APIs, microservices, Kubernetes, containers and cloud-native platforms.

Deep knowledge of OWASP Top 10, OWASP ASVS, CWE, NIST Cybersecurity Framework, secure coding practices and Zero Trust principles.

Strong threat-modeling experience using STRIDE or equivalent methods, with the ability to translate threats into preventive and detective controls.

Strong knowledge of IAM, OAuth 2.0, OpenID Connect, SAML, MFA, RBAC/ABAC, PKI, encryption, secrets management and key management.

Strong understanding of LLM and GenAI architectures, including foundation models, prompting, embeddings, vector databases, RAG, AI agents, tool/function calling and multi-agent systems.

Experience embedding SAST, DAST, SCA, secrets scanning, container scanning and Infrastructure-as-Code scanning into CI/CD pipelines.

Strong security architecture experience in at least one major cloud platform: Google Cloud, Microsoft Azure or AWS.

Hands-on familiarity with tools such as Snyk, Checkmarx, Veracode, Burp Suite, SonarQube, GitHub Advanced Security, Wiz, Prisma Cloud or Microsoft Defender.

Ability to conduct architecture reviews, identify risk, define compensating controls and guide engineering teams through remediation.

Experience establishing enterprise security standards, reference architectures, reusable patterns, guardrails and architecture decision records.

Roles & Responsibilities

Define application-security principles, standards, reference architectures and reusable secure-design patterns.

Lead security architecture assessments, threat modeling, attack-surface analysis and risk-based design reviews.

Define security requirements for APIs, microservices, Kubernetes, containers, databases, messaging platforms and cloud-native applications.

Establish authentication and authorization patterns using OAuth 2.0, OIDC, SAML, RBAC, ABAC, workload identity and least privilege.

Embed security controls and quality gates across CI/CD and DevSecOps workflows.

Define controls for encryption, key and certificate management, secrets management, data protection and privileged access.

Review vulnerabilities and architecture findings; recommend remediation, risk acceptance criteria or compensating controls.

Partner with Security Operations, Engineering, Cloud, Enterprise Architecture, Risk, Privacy and Compliance teams.

Mentor engineering teams and promote secure-by-design adoption through architecture guidance and technical enablement.