Remote: Principal Security Architect

Principal Security Architect

100% Remote

6+ Months

Summary

This position will be a part of the team responsible for establishing a unified enterprise security architecture, key security controls, and models, while being subject matter experts for various security areas to ensure our security practices and controls constantly improve. We are seeking a Principal Security Architect with strong expertise in the MITRE ATT&CK framework and NIST standards to join our cybersecurity team. This role will bridge technical depth with business alignment, ensuring our security architecture continues to mature in harmony with enterprise objectives. The ideal candidate will not only define what is required but also communicate why it matters thought translation technical security requirements into meaningful business outcomes.

Key Responsibilities:

Enhance enterprise security architecture using MITRE ATT&CK and NIST frameworks as guiding principles.

Apply Translate MITRE ATT&CK techniques and relevant NIST guidance standards to clear, actionable defensive measures that enhance strengthen organizational detection, response, and prevention native security capabilities.

Serve as a subject matter expert on MITRE ATT&CK and NIST frameworks, providing guidance to architects, engineers, and analysts.

Identify gaps in current controls, design improvements, and align architecture with evolving threat landscapes.

Map controls and technologies to MITRE ATT&CK techniques and NIST standards to ensure proportional protection for business assets.

Translate security requirements into business context, clearly articulating risk reduction, and operational value.

Partner with business and IT stakeholders to harmonize security architecture with enterprise priorities.

Develop and deliver presentations, models, and reference architectures that explain both technical requirements and their business importance.

Requirements:

A minimum of 10 years experience in one or more of the following areas: Information Security, Information Technology

Proven experience with MITRE ATT&CK framework and NIST standards (e.g., NIST CSF, NIST 800-53, NIST RMF).

5+ years in security architecture, engineering, or related cybersecurity roles.

Strong understanding of enterprise IT, cloud, and hybrid environments.

Demonstrated skill in distilling security requirements from federal frameworks and adapting them to enterprise environments to ensure consistent, risk-based protection of business systems.

Ability to connect technical requirements to business objectives in clear, compelling language.

Strong work ethic and commitment to accomplish assigned tasks with urgency

Experience with security architecture modeling tools and methodologies.

Familiarity with ISO 27001, COBIT, or other industry frameworks.

Advanced Written, Verbal, Problem Solving, Decision Making, Task Prioritization skills

Strong aptitude for continuous self- learning

Advanced analytical skills.