Senior Security Architect

We're looking to welcome a Senior Security Architect into our team. In this role, you'll help our client, a well-known leader in entertainment and technology, take ownership of, refine, operate, and sustain their organization-wide Vulnerability Management (VM) program. You'll partner closely with VM stakeholders across InfoSec, as well as online service producers, the IT department, the AWS team, the Networking group, and the Patching function spanning Windows, Linux, and Mac environments Additionally, you'll collaborate with the Security Engineering team, who will support the technical design of the VM program and handle implementation under direction from the VM manager.

This effort will involve broadening vulnerability scan coverage, enhancing scanning techniques, restructuring scan policies, adjusting security tools, and more Responsibilities Draw on strong business judgment to discuss matters in commercial terms, reframing technical risk into insights leadership can readily use Lead efforts to modernize security platforms and facilitate their move toward cloud-based environments Adjust and refine security scanning solutions to enhance coverage depth and improve scanning speed Advance automation initiatives covering repetitive security work to increase both consistency and turnaround time Build out VM workflows designed to mesh seamlessly with the organization's current tools and procedures Compare vendor-flagged vulnerabilities against data from Nexpose, bringing in the patching team wherever necessary Forecast capacity requirements for scanning infrastructure to maintain long-term program scalability Evaluate identified vulnerabilities and determine priority levels based on their business consequences and system relevance Review SAST-generated findings and sort them by risk level for appropriate handling Collaborate with service owners and other involved parties regarding any suggested changes or adjustments Monitor team performance and gauge program progress relative to defined KPI targets Oversee clear and organized reporting channels directed toward InfoSec leadership Revise existing runbooks and draft new documentation to maintain strong operational support Gather functional and non-functional specifications for VM tools, carry out proof-of-concept evaluations, and present findings with recommendations Develop a next-generation VM strategy that accounts for the client's unique business landscape while aligning with recognized security standards Guide the implementation of the next-generation VM program, steering it from concept all the way to full deployment Provide direct reporting to the InfoSec head or CISO Requirements A minimum of 10 years of relevant experience across security-centered initiatives At least 5 years spent operating in Senior, Lead, Manager, or Owner-level positions Proven history overseeing engagements for teams comprising 40 or more full-time personnel Experience utilizing one or more vulnerability management solutions, including Nexpose or Qualys Practical exposure to offensive security methodologies Background supporting security programs across both applications and infrastructure Experience engaging with bug bounty initiatives, whether participating in or overseeing them Background crafting documentation aimed at client-facing audiences Skilled in scripting work, encompassing the ability to interpret code and outline technical requirements Advanced proficiency across Python, Bash, and PowerShell Background handling system administration duties for both Windows and Linux platforms Firm understanding of core networking concepts, including VLAN trunking and TCP/IP Professional proficiency in English (C1) and a proactive, accountable approach to problem-solving Nice to have Background serving as a DevOps or Security Engineer within AWS-based cloud settings Familiarity with AWS offerings such as CloudTrail, CloudWatch, Config, Lambda, GuardDuty, Inspector, SSM, EKS, and Fargate Experience handling and incorporating Cloud Security Posture Management (CSPM) tools Background utilizing Static Application Security Testing (SAST) solutions Relevant certification, which would be considered a valuable addition to your qualifications [GTS] Benefits (generic, except India) International projects with top brands Work with global teams of highly skilled, diverse peers Healthcare benefits Employee financial programs Paid time off and sick leave Upskilling, reskilling and certification courses Unlimited access to the LinkedIn Learning library and 22,000+ courses Global career opportunities Volunteer and community involvement opportunities EPAM Employee Groups Award-winning culture recognized by Glassdoor, Newsweek and LinkedIn