Senior Cybersecurity Architect Job at Cox Automotive in Forest Park

Job Description

Primary Responsibilities

• Effectively communicate and enforce cybersecurity guidelines to both engineering and business teams, ensuring their smooth integration and adoption.
• Maintain continuous collaboration with engineering teams to guide architecture decisions and facilitate cybersecurity control implementation.
• Identify and mitigate cybersecurity risks through proactive threat modeling of products and enterprise tools.
• Provide expert cybersecurity architecture advice and consultation at major program and solution levels.
• Collaborate with cybersecurity peers to foster a cohesive cybersecurity department, sharing insights on business-specific activities.
• Serve as the cybersecurity representative within product and engineering teams, addressing pertinent security issues.
• Partner with enterprise architecture, infrastructure, and engineering teams to assess current architectures, identify security gaps, and recommend enhancements.
• Engage in security events and incident responses, identifying design gaps and proposing preventative solutions.
• Educate product and enterprise architects and engineers on cybersecurity best practices and standards.
• Work closely with legal, risk, and compliance teams to ensure architecture aligns with relevant regulatory and contractual requirements.

Minimum Qualifications

• Bachelor's degree in a related discipline, with 6 years relevant experience; or a master’s degree with 4 years; or a Ph.D. with 1 year; or 10 years of relevant experience.
• At least 4 years focused specifically on cybersecurity.
• Experience designing, securing, or operating AWS infrastructure and services.
• Ability to clearly explain the objectives of specific cybersecurity policies to a range of stakeholders.
• Exceptional customer service, writing, and executive presentation skills.
• Develop collaborative relationships with stakeholders and work with cybersecurity teams across different Cox entities.
• Ability to negotiate complex topics with various levels of employees and leadership.
• Assess risks and recommend actions based on their potential impact on the business.
• Familiarity with current cybersecurity frameworks such as zero trust, virtualization, containerization, and DevSecOps.
• Demonstrated problem-solving skills in tackling complex cybersecurity challenges with strong business acumen.
• Experience utilizing Agile methodologies.
• Track record of initiating change and implementing solutions in Fortune 1000 companies.
• Knowledge of cybersecurity frameworks and regulations (e.g., ISO 27000, NIST, GDPR, FFIEC).

Preferred Qualifications

• Experience developing cybersecurity standard practices for both cloud and on-premises environments.
• Understanding of Identity and Access Management (IAM), cryptography, secrets management, and security protocols.
• Experience with application security and standard methodologies.
• Extensive technology experience in Python, .NET, Java, and cloud-related frameworks.
• Experience with firewalls, web application firewalls, and network architectures.
• Familiarity with the AWS Well-Architected Framework.
• Experience in implementing cloud enterprise solutions in AWS, GCP, or Azure.
• Strong understanding of cloud container technologies or serverless platforms.
• Experience in industries critical to national infrastructure, such as telecommunications or financial services.
• Experience with big four consulting or Fortune 500 companies.
• Relevant industry certifications (e.g., CISSP, CEH, OSCP, AWS, CISM, CISA).

The salary for this position ranges from $119,600 to $199,400, varying based on location and candidate qualifications. Additional compensation may include an incentive program.

Benefits:

• Flexible vacation policy based on individual responsibilities and company needs.
• Seven paid holidays annually and up to 160 hours of paid wellness leave.
• Additional paid time off for bereavement, voting, jury duty, volunteering, military, and parental leave.

Applicants must be currently authorized to work in the United States without future sponsorship.