Total 9 software architect job vacancies in Legal / Public / Security category

Location: Melbourne

Team: Business Systems & Security

Reporting to: Head of Business Systems & Security

The PaperCut Story

At PaperCut, we believe two things: great code can change the world, and a great flat white can change your morning.

Now, let's be honest, "print management" doesn't usually make people leap out of their chairs. But here at PaperCut, we’ve turned the most boring part of IT into one of the most exciting and impactful jobs in tech. How? Simply put, our code saves trees!

We’re a BCorp-certified company on a mission to make our customers' printing waste-free, easy, and secure. With a global footprint spanning 195 countries and 140 million end users, we are a true Australian success story moving forward into the cloud, SaaS, and beyond print.

What you’ll actually be doing

• Influencing without Hierarchy: You’ll work across our diverse tech stack  (Java, Go, React, TypeScript etc.), across the organisation, to ensure security is baked into the SDLC from day one.

• The Helpful Expert: You’ll be the person developers want to talk to. You’ll help them run threat models for new features and coach them on writing code that is secure by design.

• Modern Cloud Security: You’ll take ownership of securing our global SaaS offerings (along with the DevSecOps team), focusing primarily on Google Cloud Platform (GCP) with some exposure to AWS.

• Technical Compliance: You’ll work with our Legal team to ensure we meet ISO27001 and other standards, not by filling out spreadsheets, but by building the technical controls that make those standards a reality.

• Scaling the Practice: You’ll help us select and tune the right mix of SAST, DAST, and SCA tools to keep our pipelines fast and our code safe.

What you bring to the table

• Deep Technical Roots: You’ve spent time in the weeds of information security and are comfortable reading and reviewing code.

• The "Uplift" Mindset: You measure your success not by how many tickets you open, but by how much more secure the engineering teams become because of your guidance.

• Cloud Fluency: You have a strong understanding of GCP or AWS and how to secure containerised workloads at scale.

• Ambition to Lead: You aren't looking for a "Lead" role just yet—you want to stay hands-on while developing the skills to lead a practice and mentor other engineers.

Why Join PaperCut?

• Values-Driven: We’re guided by our values: Caring, Honest, Intelligent, and Nimble (CHIN). They aren't just posters; they’re how we build products and treat each other.

• Melbourne Born & Bred: We are a true Australian success story, still owned and run by our founder right here in Melbourne.

• Share the Success: We offer all permanent employees a Share the Success bonus, ensuring that when the company thrives, our people do too.

• Real Impact: PaperCutters are involved in strategic decisions through collaborative leadership groups. We respect expertise and give you the autonomy to build.

• Generous Leave: Including up to 18 weeks of parental leave and a genuine commitment to Diversity, Equity, Inclusion, and Belonging.

The PaperCut Pledge

Ghosting is for Halloween, we commit to responding to every single applicant. Our hiring process is designed to be enjoyable, thorough, and fair, allowing you to show the best version of yourself.

Ready to trade your old code for code that saves trees? Apply now—the first coffee is on us!

Role Overview

We are seeking a Cyber Security Architect for cybersecurity solution projects.

The successful candidate will provide security architecture and assurance oversight throughout the project lifecycle, ensuring that security requirements are correctly interpreted, incorporated into system design, and validated through security testing and ongoing assessments.

This role will work closely with solution architects, engineering teams, project managers, and customers to ensure that solutions are secure by design and compliant with applicable security standards and regulatory requirements.

Key Responsibilities

Security Architecture & Design

• Interpret and translate security requirements from customers, regulatory authorities, and project specifications into actionable security architecture designs.
• Design and review solution security architectures covering infrastructure, network, application, and cloud environments.
• Ensure appropriate security controls are embedded into system design following secure-by-design principles.
• Provide technical guidance to project teams on security design considerations and best practices.

Security Governance & Risk Assessment

• Assess security risks arising from design decisions, technical limitations, or deviations from required security controls.
• Evaluate and document security deviations, non-compliances, and compensating controls where necessary.
• Conduct risk assessments and recommend mitigation measures to maintain an acceptable security posture.
• Support security governance activities throughout the project lifecycle.

Security Assurance & Testing

• Support security acceptance testing and security validation activities prior to system deployment.
• Work with internal or external teams performing Vulnerability Assessment and Penetration Testing (VAPT) to ensure proper coverage and remediation of identified vulnerabilities.
• Review security testing outcomes and advise on remediation and risk mitigation strategies.

Continuous Security Assessment

• Participate in periodic security reviews and assessments during the operational lifecycle of deployed solutions.
• Identify opportunities to improve the security posture of implemented systems.
• Provide recommendations for security hardening and control enhancements.

Stakeholder Engagement

• Act as the primary security subject matter expert (SME) for assigned projects.
• Liaise with customers, regulatory authorities, auditors, and internal stakeholders on security architecture and assurance matters.
• Support project teams during design reviews, security assessments, and acceptance processes.

Requirements

Experience

• Minimum 8–10 years of experience in cybersecurity, with significant experience in security architecture, security assurance, or enterprise security design.
• Proven experience designing and implementing security architectures for enterprise IT systems.
• Experience supporting projects in regulated environments, government sectors, or critical infrastructure is advantageous.
• Familiarity with security testing processes, risk assessments, and security governance frameworks.

Technical Skills

Strong understanding of:

• Security architecture principles and frameworks
• Network security architecture and segmentation
• Identity and access management (IAM)
• Encryption and key management
• Logging, monitoring, and security analytics architecture
• Secure system and application design
• Risk assessment and security compliance frameworks

Certifications

Candidates should possess recognized cybersecurity certifications, particularly insecurity architecture and enterprise security governance.

Highly Preferred

• CISSP-ISSAP – Information Systems Security Architecture Professional
• SABSA Security Architecture Certification

Key Attributes

• Strong analytical and problem-solving abilities.
• Ability to translate security requirements into practical architecture solutions.
• Strong communication skills to engage both technical and non-technical stakeholders.
• Ability to provide independent security judgement and risk-based recommendations

Work location: Jurong East

About the Role

We’re looking for a hands-on Security Engineer / Architect to help secure our systems, data, and funds across our infrastructure.

You’ll work closely with IT, Infra, R&D, Web3, Product, and business teams to design practical security controls, lead security projects end-to-end, run offensive security exercises, and support ongoing security initiatives. This is a role for someone who is comfortable going from high-level architecture to very concrete implementation details and automation.

Responsibilities

Core Security Engineering

• Design and implement security controls to protect sensitive data, financial assets, and critical systems, ensuring integrity, confidentiality, and availability.
• Evaluate, recommend, and lead the implementation of security solutions (tools, platforms, processes) in a hands-on manner.
• Own security projects from inception to rollout, working closely with IT, Infrastructure, R&D, Web3 and other business units to ensure secure and timely delivery.
• Proactively identify and assess risks and vulnerabilities, and define/enforce mitigation strategies (technical and process).

Offensive Security, Testing & Bug Bounty

• Plan and execute penetration tests and targeted assessments (applications, APIs, infrastructure) either directly or by coordinating external partners.
• Lead or support red teaming / adversarial simulations to test detection, response, and real-world resiliency of critical workflows and infrastructure.
• Work with engineering teams on purple teaming style exercises: jointly validating detections, hardening controls, and improving runbooks.
• Own the technical side of the bug bounty / responsible disclosure process:
• Triage and validate incoming reports
• Coordinate with engineering owners
• Track remediation and communicate outcomes internally (and externally where needed)

Automation & Security Engineering

• Build and maintain security automation: scripts, playbooks, and pipelines that reduce manual toil (e.g., auto-enrichment of alerts, automated checks in CI/CD, policy-as-code).
• Integrate and tune SAST/DAST/SCA, IaC scanning, image scanning, and secrets scanning into CI/CD to catch issues early with minimal noise.
• Implement detection-as-code (e.g., for SIEM / logging platforms) and continuously refine alerts based on real incidents and red team learnings.

Policy, Operations & Collaboration

• Develop, refine, and maintain security policies, standards, and procedures, with a strong focus on data, funds, and access security.
• Contribute to day-to-day security operations and monitoring, including reviewing alerts, supporting incident response, and improving detection & response capabilities.
• Collaborate with stakeholders (IT, HR, Infra, R&D, Product, Trading, and other teams) to align security initiatives with business goals and product roadmaps.

Background & Experience

• 5+ years of hands-on experience in cybersecurity, with a proven track record designing and implementing security solutions, frameworks, and policies.
• Experience with security architecture, risk assessments, and vulnerability management in complex, fast-paced environments.
• Demonstrated experience in at least one of:

----- Penetration testing / offensive security (infra, apps, APIs, or Web3), or

----- Running or working closely with red team / purple team engagements

• Experience triaging and managing security findings from scanners, pen tests, and bug bounty programs (HackerOne, Bugcrowd, self-hosted, etc.).
• Demonstrated ability to deploy and administer IAM platforms (e.g., Okta or similar) and define robust access models (RBAC, SSO, MFA).
• Competence in configuring and managing EDR and MDM solutions across a diverse device and user base.
• Hands-on experience with regulatory and compliance requirements relevant to financial institutions or crypto companies (e.g., SOC 2, ISO 27001:2022, DORA, NIST, CIS).
• Interest in Web3 / crypto (DeFi, trading platforms, digital asset custody/security, etc.) is highly advantageous
• Comfort with at least one scripting / programming language (Python, Go, TypeScript, etc.) to build automations, integrations, and internal tools.

Competencies & Personality

• Strong team player who enjoys working cross-functionally with IT, HR, Infra, R&D, Product, Trading, and business stakeholders.
• Genuinely passionate about cybersecurity, offensive and defensive — enjoys thinking like an attacker but building like an engineer.
• Experience embedding security best practices into day-to-day workflows (development, infrastructure, operations) and driving automation over manual checks.
• Ability to articulate complex security concepts in clear, practical terms to both technical and non-technical audiences.
• Values ownership, accountability, and clear communication, and is comfortable operating in a fast-changing environment with high autonomy.
  

Certifications

Must-have

• OSCP – we expect a deep, hands-on understanding of offensive techniques, not just theory.

Nice to have

• CISSP, CISM, or equivalent broad security leadership/architecture certifications.
• Relevant GIAC certs (e.g., GWAPT, GCPN, GSEC, GCLD, GCIA, GIAC Cloud / Web / Exploit tracks).
• Cloud security certifications (e.g., AWS Security Specialty, Azure Security Engineer, GCP Professional Cloud Security Engineer).
• Kubernetes / container security or general K8s certifications (CKS, CKA, etc.).

Check Point’s mission is to provide industry-leading security solutions that redefine the security landscape. We achieve our mission by constantly developing innovative and cutting-edge technology solutions focused on real customer needs, while challenging ourselves to grow and excel.

If you want to be part of the fascinating and fast-growing Cyber Security industry, where your unique talent and value will be recognized, Check Point Software Technologies is where you want to be.

Join now and become a part of the success story that secures tens of thousands of organizations of all sizes around the globe.

Join Check Point’s leading sales & engineering team and take your career one step ahead.

Career Graph

Check Point is looking for a visionary, experienced, and strategic Cybersecurity Leader to head the APAC Lead Technologists team. In this expanded leadership role, you will manage a team of 12+ Lead Technologists spread across five strategic regions—Greater China (GCR), Australia & New Zealand (ANZ), ASEAN & South Korea (ASK), India, and Japan.

As the APAC Regional Leader, you will drive technical innovation, team enablement, and strategic field engagement aligned with our cybersecurity vision. You will also be a core interface to Check Point’s global product, R&D, and sales leadership teams.

Your mission will be to accelerate innovation, influence product strategy, elevate customer confidence, and empower your team to deliver world-class security outcomes across the region.

Big Splash Impact You Make in this Role

Step into a high-visibility, high-impact regional leadership role based in Singapore. You will define and drive the technical direction and operational execution of the Lead Technologist function across Asia Pacific. Working closely with senior stakeholders, your role will focus on:

• Building a scalable and impactful regional LT structure, aligning to key APAC business goals.
• Coaching and enabling the 12+ Lead Technologists to deliver technical leadership in customer engagements.
• Driving strategic programs and technology evangelism across executive CxO stakeholders.
• Leading innovation discussions on AI Security, Zero Trust, Cloud Security, Threat Intelligence, Incident Response, and more.
• Partnering with Product, R&D, and Field Sales Leadership to align regional needs with product evolution.

What you will work on

• Lead and manage the APAC Lead Technologist team across five sub-regions (GCR, ANZ, ASK, India, Japan), including hiring, onboarding, and performance development.
• Define quarterly goals and KPIs for the team in line with business priorities.
• Drive regional executive engagement through Executive Briefings, Innovation Workshops, and Roadmap Sessions.
• Influence product direction and roadmap through regional customer use cases and competitive analysis.
• Collaborate with SE Directors and Sales Leaders to drive adoption of innovation and field-led technology programs.
• Deliver strategic enablement programs for Systems Engineers, focused on emerging trends and Check Point technology pillars.
• Represent APAC in global LT forums and act as the bridge between field insights and global product planning.
• Lead by example in customer engagements, POCs, and workshops for strategic deals.
• Lead discussions about industry trends and emerging changes in the security landscape, covering areas such as the Zero Trust Security Model, Endpoint Security, Cloud Security, Blockchain Security, IoT Security, Incident Response & Forensics, Network Security, Threat Intelligence, ERM, ESAM, AI & ML in Cyber Security, Security Automation & Orchestration, and Data Privacy Regulations.
• Own quarterly reporting of LT impact on regional pipeline acceleration, win ratios, and customer adoption.
• Evangelize Check Point solutions externally at industry events, conferences, CISO forums, webinars, etc.
• Maintain technical thought leadership through authored blogs, whitepapers, or public speaking opportunities.

What you bring On Day One with Yourself

• 15+ years of professional experience in cybersecurity or enterprise IT, including at least 5 years in regional or technical leadership roles.
• Proven ability to lead and develop high-performing, cross-cultural teams across APAC or other diverse regions.
• Deep expertise in modern cybersecurity domains such as Zero Trust, Threat Intelligence, Cloud Security, Endpoint, AI/ML, and Security Automation & Orchestration.
• Strong technical credibility, with hands-on experience in architecture design, complex POCs, CLI tools, automation, and scalable distributed systems.
• Confident engaging both technical teams and executive stakeholders (CxO level), with excellent communication and presentation skills.
• Demonstrated experience in strategic influence and thought leadership, including public speaking at conferences, leading webinars, or publishing blogs/whitepapers.
• Effective in navigating matrixed environments, collaborating across product, field, and global stakeholder groups to drive regional alignment.
• Passion for innovation, mentorship, and elevating the technical bar across a regional team.
• Strong strategic thinking and analytical skills, coupled with the ability to roll up sleeves and drive tactical execution.
• Proactive and self-driven, with a proven ability to prioritize, adapt, and deliver results in fast-paced and ambiguous environments.
• Familiarity with traditional and modern collaboration channels to connect with leadership and technical teams.
• Holds relevant industry certifications in cybersecurity (e.g., CISSP, CISM, CCSP) and/or domain-specific technologies.
• Willingness and ability to travel up to 40% of the time for business needs.

What you'll get in return

• Influence Check Point’s strategic roadmap and regional execution.
• Lead a high-performing regional team with global visibility.
• Exposure to cutting-edge, award-winning cybersecurity technologies.
• Work alongside visionary leaders and exceptional talent.
• Opportunities for global career growth and development.
• Make a real-world impact helping secure enterprises across Asia Pacific.

We are looking for individuals interested in Cloud Security Practitioner role for one of our esteemed clients in Singapore. If interested, reply with the below mentioned details.

Updated resume

Nationality:

Current employer and job title:

Current salary + Benefits:

Expected salary:
Notice period:

Reason for leaving last job:

Job Description:

• Managed Cloud Security Services - Apply deep Cloud security skills to provide the following Security Services: design, build and protect enterprise systems, applications, data, assets and people for Accenture and our clients across multiple Cloud environments.
• In addition, the role may include providing services to help clients protect their information, infrastructures, applications and business processes against cyber threats.
• Certification in INformation Security Management & AWS certification preferred.
• Experience in cybersecurity risk assessment, threat mitigation, and security architecture

Role Summary
Design enterprise security architecture and hardening standards across infrastructure and hybrid cloud.

Key Responsibilities

• Define OS, cloud, and network hardening standards
• Develop zero-trust and least privilege models
• Review architecture for new systems and exceptions
• Standardize golden images and configuration templates

Requirements

• 8–12 years in security architecture
• Deep knowledge of FSS sector security environment
• Familiar with CIS benchmarks and secure configurations
• Certifications: CISSP / SABSA / Azure Security

Duration - 3 year Contract

Be a Part of Something BIG

We create great technology that can change the future, and we're looking for people to be part of our digital and 5G journey. If you like to work in a dynamic, leading communications technology group to deliver innovations and excellence across the region, come join our digital, software engineering, data and cyber security teams!

The Group Security Architect is a visionary leader responsible for shaping the Singtel Group’s security architecture strategy and embedding “secure-by-design” principles across all technology domains. Working closely with the Group Enterprise Architect, Security Architects from Operating Companies, this role defines the Group Security Guardrails that underpin our Reference Architecture and technology blueprints.

As a trusted advisor and design authority, the Group Security Architect ensures that emerging technologies are securely adopted at scale across the Group. The role bridges business, technology, and security strategy, driving alignment between innovation and resilience while strengthening architectural consistency across OpCos.

This position demands both technical depth and strategic foresight and someone who can anticipate technology trends, translate them into actionable security patterns, and influence decision-making at the Group level.

Apply now, and ignite our digital future together.

Make an Impact by

Strategic Leadership & Vision

• Define and maintain the Group Security Architecture Vision and roadmap, ensuring alignment with Group Enterprise Architecture and business strategy.

• Anticipate emerging technology shifts and translate them into forward-looking security design principles and guardrails.

• Support Group’s technology modernisation initiatives by embedding “secure-by-design” and “zero-trust” concepts into enterprise blueprints.

Security Guardrails & Reference Architecture

• Co-develop with the Group Enterprise Architect the Group Security Guardrails to guide technology adoption, integration, and operations across OpCos.

• Maintain the Security Reference Architecture (SRA) for major technology domains

• Ensure alignment with regulatory frameworks

• Translate architectural blueprints into adoptable and actionable implementation guidance for solution architects and engineering teams.

Security Technology Stack Alignment

• Drive Group-wide alignment of the security technology stack across OpCos, ensuring rationalisation, interoperability, and consistent adoption of Group-endorsed platforms.

• Lead the monthly Security Technology Stack Alignment Forum, bringing together OpCo security and architecture leads to review current deployments, share lessons learned, and define forward plans for convergence.
• Identify opportunities for joint initiatives, shared services, and Group-level optimisation across domains
• Collaborate with Group Procurement and Technology Strategy teams to align vendor selection, licensing models, and roadmap integration.

Advanced Cyber Technology Exploration

• Participate in the evaluation and assessment of advanced technologies such as areas related to AI (e.g., GenAI, LLMs), quantum computing, and deepfakes.

• Participate in pilots and research programs to test technical readiness and applicability.

• Identify opportunities to integrate advanced technologies into the Group’s cyber resilience roadmap.

Architecture Review Board (ARB) & Governance

• Represent Group Cyber in the Group Architecture Review Board, providing authoritative guidance on cybersecurity controls, technology patterns, and architecture deviations.

• Define security architecture review processes, ensuring risk-based and business-aligned assessments.

• Develop reusable security architecture patterns and decision frameworks to accelerate secure solution design.

Design Assurance & Advisory

• Provide design assurance for strategic Group programs and high impact initiatives

• Partner with OpCo CISOs and architects to ensure consistent implementation of approved guardrails and architectural patterns.

• Act as a trusted advisor to solution architects, engineers, and project teams, helping balance innovation with security and compliance.

 Budget & Resource Stewardship

• Assist in planning and managing budgets for emerging tech-related cyber programs.

• Recommend resource allocation strategies to optimize cost, scale, and talent effectiveness.

Stakeholder Engagement & Influence

• Partner with the Group Enterprise Architecture, OpCo Architecture and Security Architecture Teams to ensure alignment of blueprints and technology choices.

• Contribute to cross-functional governance

• Collaborate with architects and technical leads across OpCos on security-by-design, architecture assurance, and emerging security paradigms.

• Liaise with internal stakeholders to align cybersecurity strategy with enterprise-wide goals.

• Foster alignment and awareness of cybersecurity priorities across the Group.

Skills for Succes

• Bachelor’s degree in computer science, Information Technology, Cybersecurity, or a related field.
• 10–15 years in enterprise or security architecture, with at least 5 years in Group-level or large multi-entity governance.
• Demonstrated experience in managing and delivering large-scale cybersecurity projects and design architectures.
• Strong understanding of cybersecurity frameworks, standards, and regulations (e.g., NIST, ISO 27001, GDPR, etc.).
• Familiarity with emerging cyber threats and innovative defenses, particularly in advanced technology areas.
• Security architecture frameworks (SABSA, TOGAF, NIST), Zero Trust, Cloud (AWS/Azure/GCP), IAM, Data Security, Network Segmentation, AI Security, and Quantum.
• Strong understanding of telco, cloud, and enterprise IT ecosystems.
• Proven ability to translate complex technical concepts into board- and business-friendly narratives.
• Certifications preferred: SABSA, TOGAF, CISSP, CISM, or CCSP.
• Experience representing security architecture in cross-functional review boards and engaging senior stakeholders.
• Exceptional leadership, collaboration, and team management skills.
• Ability to work effectively with diverse stakeholders, including subsidiaries in a conglomerate or multi-subsidiary environment.
• Strong analytical, decision-making, and problem-solving skills, especially in dynamic and high-pressure situations.
• Excellent communication and interpersonal abilities, with a proven track record of engaging and influencing stakeholders at all levels.
• Strong capacity to present complex ideas and strategies in an accessible manner for varied audiences.

Rewards that Go Beyond

• Flexible work arrangements
• Full suite of health and wellness benefits 
• Ongoing training and development programs 
• Internal mobility opportunities

Are you ready to say hello to BIG Possibilities?

Take the leap with Singtel to unlock new opportunities and accelerate your growth. Apply now and start your empowering career!

We are committed to a safe and healthy environment for our employees & customers and will require all prospective employees to be fully vaccinated.

What is The Role: 

You will have the opportunity to work with tremendous Services, Engineering and Sales teams and wear many hats. This is a critical role, as Consultants have an amazing chance to make an immediate impact on the success of Elastic and our customers.

What You Will Be Doing:

We are looking for a delivery architect that demonstrates visionary leadership by orchestrating and implementing Elastic solutions, generating customer business value from our products. Grouping responsibilities in the following areas:

Assess and Design

• Thoroughly analyze and understand customer business pain points and intricate technical challenges
• Gather requirements in complex enterprise customer environments
• Master Elastic solution architectural design on platforms integrating with other enterprise technologies
• Create and build out customer road maps
• Demonstrate technical authority by proficiently articulating complex technical solutions in clear language, effectively persuading the audience to embrace recommended best practices while presenting and delivering Elastic's optimal solutions.

Implement and Deliver

• Lead technology workshops that include hands-on mentoring, whiteboarding, and solution development
• Deliver outcome-based solutions 
• Lead, hands-on-deploy (from data onboarding, configuration, visualizations, alerting), and seamlessly integrate Elastic products and APIs into intricate platform architectures, harnessing years of technical expertise
• Master data modeling, develop and optimize queries, tune and scale clusters, prioritizing fast search and analytics at scale
• Solve our customers’ most challenging platform, configuration, data and cyber security problems

Grow and Expand

• Orchestrate and implement capacity planning in mission-critical environments
• Perform technical audits, upgrades, platform migrations, and use-case expansion
• Work with and guide our customers along their ever-maturing Cyber journey

Influence and Collaborate

• Work closely with the Elastic Engineering, Product Management, and Support teams to identify feature enhancements, extensions, and product defects
• Engage with the Elastic Sales team to scope opportunities while assessing technical risks, questions, or concerns
• Be a mentor/coach for your fellow Elastic consultants
• Demonstrated ability to communicate to a variety of stakeholders up to the C-suite level

What You Bring: 

• Minimum of 5 years as a Consulting Architect or senior IT functional leadership experience
• History of working as a Consultant delivering professional services engagements
• Strong customer advocacy, relationship-building, presentation and communications skills
• Ability to lead meetings with project owners and C-level stakeholders. 
• Ability to articulate the business value of an outcome-based delivery while being technically savvy and hands-on
• Demonstrated experience of technical leadership throughout project lifecycles
• Solid experience deploying Elastic Security solutions or similar domains (Splunk, Arcsight, IBM QRadar). Alternatively, at least 2 years experience working as a Security Analyst, preferably utilising SIEM or endpoint security applications in a Threat Detection and Response focused role
• Knowledge of the MITRE ATT&CK framework and how it can be applied for Enterprise defence
• Fundamental understanding and experience of security tool capabilities
• Understanding and passion for cyber security and open-source technology
• Hands-on experience in on-prem systems and/or public/private cloud platforms like AWS, Azure, GCP, Openstack
• Hands-on experience in Linux
• Good understanding of networking, security, containerization, serverless, DevOps in system landscapes and infrastructure automation knowledge.
• Experience utilising programming or scripting languages in a corporate environment like Python, Javascript, Go or Chef/Puppet etc.
• Understanding of databases
• Ability and willingness to travel from time to time as required
• Comfortable working remotely in a highly distributed team

Bonus Points:

• BS in Computer Science or related Information Security / Cybersecurity field
• Certifications and specialized training in Information Security and Cybersecurity
• Deep understanding of Enterprise cyber defence in large networks
• Deep understanding of Elasticsearch and Lucene, including Elastic Certified Engineer certification
• Experience working closely with a pre-sales organization in scoping the needs of Customers
• Experience with Statement of Work delivery
• Experience with both Agile and Waterfall methodologies
• Experience contributing to an open-source project or documentation
• Endpoint tool skills and experience ingesting network feeds into Elastic for security purposes
• Experience as a Software Engineer, System Administrator, or DevOps Engineer

Role Overview

The Cloud Security Architect will lead and elevate our cloud security posture across the BU, with a strong emphasis on Microsoft Azure. The ideal candidate is deeply experienced in cloud security principles, tooling, and governance, while also bringing a solid understanding of cloud architecture and development best practices to ensure secure-by-design cloud solutions. This role is crucial in aligning cloud security strategy with business requirements, guiding secure cloud adoption, and collaborating with product teams, cloud engineers, and external consultants.

Key Responsibilities

• Leads the design, implementation, and governance of Azure cloud security controls, aligned with industry standards (e.g., CIS, NIST, ISO 27001)
• Continuously strengthen Azure security posture using tools such as Defender for Cloud, Sentinel, Azure Policy, RBAC, and PIM
• Develops and maintains cloud security policies, standards, and secure configuration baselines.
• Coordinates the identification, prioritization, and remediation of cloud vulnerabilities and misconfigurations.
• Supports security assessments, threat modeling, and risk analysis for cloud based solutions.
• Provides guidance during cloud security incidents and contribute to incident response processes and root cause analysis.
• Collaborates with cloud architects and development teams to ensure secure-by design patterns and reference architectures.
• Provides architectural security input on Azure services, identity models, network design, and application deployment patterns.
• Supports the creation of reusable secure infrastructure templates (e.g., Pulumi, Terraform) and DevSecOps automation.
• Translates technical security risks into clear business impacts for stakeholders.
• Willingness to grow into taking care of overarching Security Management topics. Support audits, compliance initiatives, and risk assessments. Serve as a key liaison between engineering teams, security consultants, and business stakeholders.