Security Architect
As a Security Architect at Müller’s Solutions, you will be pivotal in defining the security architecture strategy for our organization. You will be responsible for designing and implementing comprehensive security solutions and frameworks that protect our critical information assets. This role requires a deep understanding of security principles, technologies, and industry standards as you collaborate with various departments to safeguard our digital infrastructure.
Key Responsibilities:
• Develop and maintain the security architecture framework, policies, and procedural guidelines to ensure compliance with regulatory and organizational requirements.
• Conduct security assessments, threat modeling, and risk analysis to identify vulnerabilities and recommend appropriate mitigation strategies.
• Collaborate with IT and development teams to integrate security practices throughout the software development lifecycle.
• Design and implement robust security solutions, including identity and access management, encryption, and network security measures.
• Stay updated on the latest security trends, threats, and technologies to proactively address emerging risks.
• Provide training and guidance to team members and stakeholders on security best practices and risk management.
Requirements
Requirements:
- Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field.
- 5+ years of experience in security architecture or a related role, with a strong focus on designing and implementing secure systems and infrastructures.
- End-to-end experience in designing and implementing secure infrastructure environments supporting classified data (Top Secret, Secret, Confidential, etc.).
- Proven expertise in data classification, data governance, and secure data transfer workflows between classified and non-classified zones.
- In-depth knowledge of security frameworks, practices, and standards such as:
- ISO/IEC 27001:2022
- NIST SP 800-53 Rev. 5
- NIST SP 800-37 Rev. 2
- NIST SP 800-46 Rev. 2
- NIST FIPS 140-2
- NIST FIPS 199
- Secure Controls Framework (SCF)
- CIS Critical Security Controls Version 8
- CIS Benchmarks
- OWASP
- Familiarity with regional and governmental security regulations, including UAE Information Assurance (IA) and Ministry of Defence (MOD) requirements.
- Experience with security technologies such as firewalls, SIEM, endpoint protection, and identity and access management (IAM) solutions.
- Technical proficiency in cloud security, with experience in platforms such as AWS or Microsoft Azure.
- Strong analytical, problem-solving, and communication skills, with the ability to clearly articulate complex security concepts to technical and non-technical audiences.
Preferred Qualifications:
- Master's degree in a related field.
- Relevant certifications such as CISSP, CISM, or CCSP.
- Experience with security compliance and governance frameworks.
- Knowledge of secure coding practices and experience in a DevSecOps environment.
- TOGAF certification would be an asset.
Benefits
1- Attractive Package.
2- Family Benefits.
3- Visa.
4-Air Tickets.
Skills
As published by workable · 15 questions · 15 written answers
First name, Last name, Email, Headline, Phone, Address, Photo, Education, Experience, Summary, Resume, Cover letter
- What is your current salary in AED?
- What is your expected Salary in AED?
- What is your notice period or availability to join?
- How many years of experience do you have as a Security Architect?
- Where are you located now?
- Which languages do you speak?
- Do you have hands-on experience with security technologies such as firewalls, SIEM, endpoint protection, and IAM solutions?
- Are you proficient in cloud security, with experience on platforms like AWS or Azure?
- Do you have experience with security compliance, governance frameworks, and DevSecOps practices?
- Are you familiar with ISO/IEC 27001:2022, including its controls for Information Security Management Systems (ISMS)?
- Do you have hands-on experience applying controls from NIST SP 800-53 Rev. 5 (Security and Privacy Controls for Information Systems)?
- Are you knowledgeable about NIST SP 800-37 Rev. 2, particularly the Risk Management Framework (RMF) process?
- Have you worked with NIST SP 800-46 Rev. 2, focusing on securing telework, remote access, and BYOD environments?
- Are you experienced with the CIS Critical Security Controls v8, including control implementation and maturity assessment?
- Have you utilized CIS Benchmarks for system hardening and configuration compliance?