CyberSecurity Architect

Bachelor's or Master's degree in Computer Science, Cybersecurity, Software Engineering, Computer Engineering, or a related technical discipline, or equivalent experience. Minimum 10+ years of experience in software engineering, product cybersecurity, or security architecture, including 3+ years leading technical teams or cybersecurity initiatives.

Demonstrated expertise in product cybersecurity architecture, cybersecurity architecture planning, Threat and Risk Assessments (TRA), threat modeling, security requirements definition and disposition, secure design principles, attack surface analysis, and security design reviews for complex software-enabled products.

Strong knowledge of secure software development, cybersecurity risk management, vulnerability assessment, penetration testing, security control selection, security verification, and risk-based engineering decision making, with the ability to translate technical findings into practical engineering solutions.

Experience supporting regulated product development, including cybersecurity architecture plans, security requirements definition, requirements applicability and disposition, cybersecurity design reviews, security acceptance criteria, design traceability, residual risk documentation, and cybersecurity deliverables supporting regulatory submissions and customer communications.

Experience developing technical cybersecurity documentation supporting regulatory and government certification frameworks, such as FDA cybersecurity guidance, NIST Risk Management Framework (RMF), DoD Authorization to Operate (ATO), or equivalent security assurance programs, is highly desirable.

Proven ability to collaborate across engineering organizations, facilitate cybersecurity risk discussions, and balance cybersecurity, product architecture, operational constraints, regulatory expectations, and business objectives to enable informed engineering decisions.

Strong leadership, communication, and stakeholder management skills, with a track record of mentoring technical teams, fostering collaboration, and contributing to the continuous improvement of cybersecurity architecture practices. Experience in medical devices, laboratory diagnostics, or other regulated industries is highly desirable.