Senior Solutions Architect – Vulnerability/Exposure Management

Posted 1hrs ago

Employment Information

Education
Salary
Experience
Job Type

Report this job

Job expired or something wrong with this job?

Job Description

Senior Solutions Architect modernizing vulnerability and exposure management for Trace3, a transformative IT solutions and consulting provider. Leading CTEM architecture, presales engagements, and security operations enablement.

Responsibilities:

  • Lead complex client engagements as the senior architect for vulnerability management modernization, CTEM program development, exposure management architecture, and risk-based remediation strategies
  • Assess client vulnerability and exposure management capabilities, technologies, processes, and operational maturity
  • Design target-state architectures integrating vulnerability scanning, attack surface management, cloud and container security, identity exposure, and attack path analysis
  • Develop and operationalize CTEM programs for exposure discovery, prioritization, validation, and remediation
  • Define risk-based prioritization methodologies using CVSS, EPSS, CISA KEV, threat intelligence, asset criticality, exploitability, compensating controls, and business context
  • Architect operating models covering asset ownership, remediation workflows, SLAs, exception management, risk acceptance, executive reporting, and team integration
  • Design automation and orchestration workflows for findings normalization, enrichment, ticketing, workflow integration, and remediation validation
  • Evaluate and incorporate AI-assisted and agentic capabilities with governance and human oversight
  • Incorporate threat-informed validation, attack path analysis, breach and attack simulation, penetration testing, and purple-team findings
  • Collaborate with SOC/SIEM architects to integrate exposure intelligence with detection and response platforms
  • Develop reference architectures, assessment methodologies, solution briefs, packaged offerings, and delivery playbooks
  • Collaborate with Security Solutions practices, regional teams, Managed Services, and Service Delivery
  • Serve as a technical counterpart to strategic security technology partners
  • Support account teams with technical discovery, solution architecture, competitive positioning, proposals, SOWs, effort estimation, and technical validation
  • Deliver technical enablement, workshops, and knowledge-sharing sessions; mentor junior architects and early-career practitioners
  • Provide secondary architectural and presales support across SIEM/SOAR, EDR/XDR, SOC modernization, threat intelligence, and AI-enabled security operations
  • Represent Trace3 through executive briefings, partner engagements, industry events, thought leadership, and technical presentations

Requirements:

  • Bachelor's degree in Computer Science, Cybersecurity, Information Security, Engineering, or a related discipline from an accredited college or university, or equivalent measurable knowledge and experience gained through industry, military, defense, or government operations
  • 8+ years of experience in cybersecurity, with significant hands-on experience designing, implementing, operating, or modernizing enterprise vulnerability management or exposure management programs beyond product implementation alone
  • Experience in a customer-facing presales, solutions architecture, or technology consulting role within a VAR, systems integrator, consultancy, or technology vendor
  • Deep technical expertise in enterprise vulnerability management, risk-based vulnerability prioritization, CTEM principles, exposure assessment, and remediation lifecycle management
  • Demonstrated experience with leading vulnerability and exposure management technologies, such as Tenable, Qualys, Rapid7, CrowdStrike Falcon Exposure Management, Wiz, Axonius, XM Cyber, or comparable enterprise platforms
  • Ability to design target-state vulnerability and exposure management architectures, including platform consolidation, technology integration, program modernization, and scalable operating models
  • Experience developing or operating enterprise vulnerability management programs, including asset discovery, inventory and ownership, vulnerability identification, findings normalization, risk prioritization, remediation tracking, exception management, and executive-level reporting
  • Working knowledge of CVSS, EPSS, CISA KEV, and SSVC
  • Familiarity with EASM, CAASM, attack path analysis, breach and attack simulation, and adversarial validation techniques
  • Experience integrating platforms with CMDB, ITSM, SOAR, cloud security platforms, and security analytics solutions
  • Experience with AWS, Azure, and GCP, including cloud workload security, container security, native security tooling, and cloud vulnerability and exposure management
  • Practical understanding of automation, orchestration, and AI-assisted security capabilities
  • Working knowledge of SIEM/SOAR, EDR/XDR, threat detection and response, and SOC operations
  • Understanding of CrowdStrike, Palo Alto Networks Cortex XSIAM, Microsoft Sentinel, Splunk, or Google SecOps
  • Working knowledge of NIST CSF, NIST SP 800-40, CIS Controls, MITRE ATT&CK, ISO 27001, and CTEM-aligned exposure management frameworks
  • Ability to conduct technical workshops, security assessments, architectural reviews, and executive briefings
  • Experience creating technical documentation, presentations, architectural designs, implementation plans, proposals, SOWs, and strategic roadmaps
  • Strong executive communication, interpersonal, collaboration, and customer presentation skills
  • Strong problem-solving, organization, detail orientation, and time management skills
  • Ability to manage multiple and changing priorities while meeting deadlines
  • Ability to travel when needed (approximately 25–35%); holds a valid driver’s license

Benefits:

  • Comprehensive medical, dental and vision plans for you and your dependents
  • 401(k) Retirement Plan with Employer Match
  • 529 College Savings Plan
  • Health Savings Account
  • Life Insurance
  • Long-Term Disability
  • Competitive Compensation
  • Training and development programs
  • Major offices stocked with snacks and beverages
  • Collaborative and cool culture
  • Work-life balance
  • Generous paid time off