Senior Security Architect

Aquent is proud to partner with a leading financial technology company dedicated to building secure and innovative products and services for its members and customers. This organization is at the forefront of deploying robust product security practices, compliance frameworks, and design patterns, collaborating across engineering, product, and design teams to ensure the highest security standards and regulatory adherence.

Are you ready to be a pivotal force in shaping the security landscape of cutting‑edge platforms and products? We are seeking a visionary architect to drive the end‑to‑end security of our digital ecosystem. In this role, you will be instrumental in making critical security decisions, leading initiatives that directly support our business objectives, and ensuring our members’ trust through unparalleled security.

Your expertise will not only protect our innovative offerings but also empower their growth, making a tangible impact on our mission to redefine financial services.

• Champion cybersecurity architecture, effectively translating complex security concepts for product and engineering teams.
• Integrate new and existing security tools, standards, and processes seamlessly into the development lifecycle.
• Provide expert guidance on the secure design of product and application architecture, articulating security requirements through well‑defined user stories, initiatives, and epics.
• Conduct thorough security design reviews and threat modeling for both infrastructure and application projects.
• Perform security reviews and assessments of critical applications and platforms to identify vulnerabilities and ensure compliance with security standards.
• Review and secure APIs, ensuring robust authentication, authorization, and data validation mechanisms.
• Collaborate closely with development teams, offering security‑specific feedback on new features.
• Analyze and evaluate evolving cloud security trends and vulnerabilities, providing continuous feedback for best practices.
• Develop comprehensive security test plans for new products and design scalable security solution blueprints.
• Automate security checklists and implement “security as code” leveraging cloud services and continuous integration/continuous delivery (CI/CD) components.
• Conduct continuous threat modeling for new features and product offerings within an agile delivery environment.
• Perform business‑level security architecture assessments to evaluate existing security programs and cloud application architectures, identifying weaknesses and recommending improvements.
• Partner with risk and compliance teams, contributing to security risk impact assessments and shaping information security policies, standards, and guidelines.
• Work with engineering teams to ensure application security risks are effectively identified using market‑leading tools and appropriately addressed, balancing security with usability.
• Architect, design, prioritize, coordinate, and communicate the necessary security technologies to maintain a highly secure yet user‑friendly computing environment.

• Strong understanding of cloud services, major cloud platforms, AI Security, SaaS security, and the Well‑Architected Framework security pillar.
• Experience with threat modeling or other risk identification techniques.
• Proven experience conducting architecture reviews to identify and evaluate application and infrastructure security risks.
• Deep understanding of containerization technologies like Docker, orchestration platforms such as Kubernetes, and CI/CD pipelines.
• Knowledge of network and web‑related protocols (e.g., TCP/IP, UDP, IPSEC, HTTP, HTTPS, routing protocols).
• Expertise in Identity and Access Management, including authentication and authorization protocols like OIDC, OAuth
  2.0, and SAML.
• Proficiency in web application security, microservices, and API design patterns.
• Experience with service mesh concepts, microsegmentation, and network security.
• Familiarity with cryptographic protocols and standards for data encryption.
• Demonstrated knowledge of the threat landscape, security threat and vulnerability management, and security monitoring and analytics.
• Ability to…