Senior InfoSec Architect

Position Summary:

As a Senior InfoSec Architect at Fireblocks, you'll have a pivotal role in fortifying our organization against cyber threats and vulnerabilities and protecting our most valuable assets. You'll lead the charge in designing and implementing innovative security solutions, frameworks, and strategies to safeguard our systems and infrastructure.

Key Responsibilities:

• Security Strategy and Planning:

  • Define and refine our security strategy, policies, and procedures to stay ahead of emerging threats.

  • Develop and implement advanced security architectures tailored for a cloud-native, SaaS-centric company.

  • Ensure our security architecture complies with industry standards and regulatory requirements, leveraging the latest technologies and methodologies.

• Security Risk Reduction:

  • Identify, assess, and prioritize cyber security risks, threats, and vulnerabilities, taking proactive measures to mitigate potential impacts.

  • Implement robust controls to safeguard our organization's assets and data based on gap analysis and threat modeling processes.

• Security Tools and Automation:

  • Evaluate, select, and implement state-of-the-art security technologies and tools to enhance our defense capabilities.

  • Develop and deploy automation-based workflows to streamline security operations and maximize efficiency.

Qualifications:

• At least 5 years of experience in security architecture and cybersecurity, primarily within cloud-native, SaaS-centric companies.

• Extensive expertise in various security dimensions, including cloud security, endpoint and network security, SaaS security, data protection, and Identity & Access Management.

• Proficiency in risk assessment and threat modeling for various scenarios and technologies.

• Experience simplifying processes using automation and scripts (Python, Bash, etc.).

• Excellent communication and collaboration skills.

• Strong problem-solving and analytical abilities.

• Incident response and offensive backgrounds are a plus.

• CISSP, CISM, or other relevant security certifications are a plus.