Principal Security Architect

Client : telecommunications & media industry

Job : Principal Security Architect

Location : hybrid in Philadelphia, PA

Job type : Full-time / Direct Hire

Job Summary

This global technology team invites candidates to join a company dedicated to developing innovative technology solutions and enhancing user experiences across media, technology, and customer engagement platforms. In this award-winning team, employees turn big ideas into pioneering products, services, and platforms enjoyed by millions worldwide. The company fosters a culture of innovation, celebrates and invests in employee-driven ideas, and encourages authenticity in the workplace.

Position Overview

The ideal candidate will possess expertise in threat modeling assessment techniques, including STRIDE and DREAD, and have a comprehensive understanding of architecture and the Software Development Lifecycle (SDLC). Experience with Red Team operations, such as penetration testing, vulnerability scanning, vulnerability remediation, and cloud environment management, is essential.

Responsibilities

• Execute and advance the Threat Modeling Assessment program.
• Conduct threat modeling to identify use cases, threat agents, attack vectors, patterns, and necessary compensating controls for risk mitigation.
• Act as a Cyber Resilience advocate within the Threat Modeling Assessment program.
• Engage in SDLC and architecture approval processes relevant to cyber threat modeling.
• Develop reports that highlight risks, controls, assets, trust zones, and enhancement requirements.
• Collaborate with stakeholders to create actionable plans for addressing identified threat modeling issues.
• Manage multiple threat modeling engagements simultaneously.
• Ensure Cyber Resilience controls align with standards such as OWASP, NIST SP 800-53, and ISO 27002, offering insights into risk themes and best practices.
• Analyze cyber risks impacting both the organization and industry, focusing on technical and security dependencies to enhance mitigation strategies.
• Provide expertise on cyber hygiene activities to support the organization's business impacts.

Qualifications and Skills

Education

Bachelor's Degree in Computer Engineering, Computer Science, Information Systems, Cyber Security, Business Administration, or equivalent experience.

Preferred Certifications