Cybersecurity Architect
- Boston, MA, United States
Applications open in a new tab.
Job details
- Posting language
- English
- Posted
Original job description
The Cybersecurity Architect is responsible for supporting projects that apply new and existing technologies and solutions to solve business needs in the cybersecurity space, for the US business segment. This Architect works with other architects, engineers, technical SMEs, and operational support staff both within IT and other business units to provide and maintain solutions that meet business and technical requirements.
The Architect will assist in the development of technology roadmaps and documentation; act as the subject matter expert in a variety of domains such as Identity and Access Management (IAM), SIEM integration, IR automation, etc. The Architect will maintain a solid understanding of the entire Information Security landscape.
This role is a unique opportunity to join a team and company whose work will have direct impact on company direction, our customers, and our industry.
Position Responsibilities:
- Contribute to the development and evolution of cybersecurity strategies, architecture standards, and technology roadmaps aligned with Zero Trust principles and business priorities.
- Design and guide security architectures across areas such as IAM, SIEM and security operations, cloud security, application security, and incident-response automation.
- Design enterprise solutions that incorporate appropriate security controls and risk-mitigation strategies across modern and legacy technology environments.
- Lead and contribute to conceptual, solution, and component-level security architectures and develop reusable reference architectures and implementation patterns.
- Review solution architectures, provide security guidance, and help architects and engineering teams align solutions with established security standards and architecture principles.
- Evaluate third-party technologies, platforms, suppliers, and emerging security capabilities, providing recommendations based on security, architecture, and business requirements.
- Partner with architects, engineers, security teams, technology operations, and business stakeholders to design secure, resilient, and supportable solutions.
- Assess relevant vulnerabilities, security alerts, and threat intelligence and translate emerging threats into architecture guidance and appropriate risk-mitigation strategies.
- Support security investigations and incident-response activities by providing architecture and technical expertise where needed.
- Maintain awareness of evolving cybersecurity technologies, industry practices, and threat trends and incorporate relevant developments into security strategy and architecture.
- Build collaborative relationships with internal and external technology stakeholders and clearly communicate security requirements, architectural decisions, risks, and trade-offs.
- Provide hands-on technical guidance and support for security solutions and architecture validation, including participation in after-hours response to significant security incidents when required.
Required Qualifications :
- Extensive relevant experience in cybersecurity, security engineering, or security architecture, typically gained through 7+ years of professional experience or equivalent demonstrated expertise.
- Strong knowledge of core application and platform security concepts, including authentication, authorization, transport security, secure configuration, data validation, and security logging.
- Experience designing or supporting enterprise security solutions across areas such as IAM, SIEM/security operations, cloud security, application security, or infrastructure security.
- Experience with threat modeling, security controls, risk mitigation, and secure testing methodologies.
- Understanding of cloud-native architecture, modern application patterns, and infrastructure security principles.
- Working knowledge of security considerations across common enterprise operating systems, including Windows, macOS, and Linux environments.
- Strong understanding of network protocols, network security concepts, and common enterprise security architecture patterns.
- Experience with SaaS, IaaS, and PaaS environments and cloud security practices using platforms such as Microsoft Azure, AWS, GCP, or comparable cloud technologies.
- Knowledge of recognized cybersecurity frameworks and practices, such as NIST.
- Hands-on technical capability with scripting, operating-system tooling, troubleshooting, and security configuration sufficient to support architecture validation and complex solution design.
- Understanding of modern software development lifecycles and how security is incorporated into Agile and iterative development practices.
- Strong written and verbal communication skills, with the ability to explain complex security requirements, risks, architecture decisions, and trade-offs to both technical and non-technical stakeholders.
Preferred Qualifications :
- Familiarity with incident-response tooling and digital-forensics concepts.
- Experience with secrets management, security monitoring, SIEM, and related enterprise security technologies.
- Experience supporting security architectures in a large, complex, or regulated enterprise environment.
- Familiarity with security automation, DevSecOps, or related approaches for integrating security into technology delivery.
- Security certifications such as CISSP or other relevant cybersecurity certifications.
- Bachelor's degree in computer science, cybersecurity, engineering, information systems, or a related discipline, or equivalent practical experience. A master's degree in a relevant discipline is an asset.
When You Join Our Team :
- We’ll empower you to learn and grow the career you want.
- We’ll recognize and support you in a flexible environment where well-being and inclusion are more than just words.
- As part of our global team, we’ll support you in shaping the future you want to see.
If you are applying to this role in US, please note the salary range is $107,450 to $199,550 USD. Additionally, employees also have the opportunity to participate in incentive programs and earn incentive compensation tied to business and individual performance .
The role being advertised is an existing vacancy.
Acerca de Manulife y John Hancock
Manulife Financial Corporation es un importante proveedor internacional de servicios financieros que ayuda a las personas a tomar decisiones de una manera más fácil y a vivir mejor. Para obtener más información acerca de nosotros, visite http://www.manulife.com .
Manulife es un empleador que ofrece igualdad de oportunidades
En Manulife/John Hancock, valoramos nuestra diversidad. Nos esforzamos por atraer, formar y retener una fuerza laboral tan diversa como los clientes a los que prestamos servicios, y para fomentar un entorno laboral inclusivo en el que se aprovechen las fortalezas de las culturas y las personas. Estamos comprometidos con la equidad en las contrataciones, la retención de talento, el ascenso y la remuneración, y administramos todas nuestras prácticas y programas sin discriminación por motivos de raza, ascendencia, lugar de origen, color, origen étnico, ciudadanía, religión o creencias religiosas, credo, sexo (incluyendo el embarazo y las afecciones relacionadas con este), orientación sexual, características genéticas, condición de veterano, identidad de género, expresión de género, edad, estado civil, estatus familiar, discapacidad, o cualquier otro aspecto protegido por la ley vigente.
Nuestra prioridad es eliminar las barreras para garantizar la igualdad de acceso al empleo. Un representante de Recursos Humanos trabajará con los solicitantes que requieran una adaptación razonable durante el proceso de solicitud. Toda la información que se haya compartido durante el proceso de solicitud de adaptación se almacenará y utilizará de manera congruente con las leyes y las políticas de Manulife/John Hancock correspondientes. Para solicitar una adaptación razonable en el proceso de solicitud, envíenos un mensaje a hr@manulife.com .
Referenced Salary Location
CAN, Ontario, Toronto, 200 Bloor Street East
Modalidades de Trabajo
Híbrido
Salary range is expected to be between
$113,000.00 CAD - $163,000.00 CAD
Los empleados también tienen la oportunidad de participar en programas de incentivos y recibir una compensación vinculada al rendimiento empresarial e individual. El salario real variará según las condiciones del mercado local, la geografía y factores relacionados con el puesto como conocimientos, habilidades, requerimientos, experiencia y educación/formación. Si solicitas este puesto fuera de tu ubicación principal, por favor escríbenos a hr@manulife.com para conocer el rango salarial correspondiente a tu ubicación.
Manulife ofrece a los empleados aptos una amplia variedad de beneficios personalizables, entre ellos, beneficios de salud, odontológicos, de salud mental, oftalmológicos, por discapacidad a corto y a largo plazo, cobertura de seguro de vida y por muerte accidental y desmembramiento, adopción/subrogación y bienestar, y planes de asistencia al empleado/familiar. También ofrecemos a los empleados admisibles varios planes de ahorro para la jubilación (incluidos planes de pensiones y un plan mundial de propiedad de acciones con contribuciones equivalentes del empleador) y recursos de asesoramiento y educación financiera. Nuestro generoso programa de tiempo libre remunerado en Canadá incluye feriados, vacaciones, días personales y días por enfermedad, y ofrecemos la gama completa de ausencia laboral reglamentaria. Si se está postulando para este puesto en los EE. UU., póngase en contacto con hr@manulife.com para obtener más información sobre las disposiciones relativas al tiempo libre remunerado específicas de EE. UU.
We use data and analytics technologies, such as artificial intelligence (AI), and automated processing tools, to analyze and process the information you provide to us or third parties in the application process. For more information, please refer to our personal information collection statement (https://careers.manulife.com/global/en/talentacquisitionprivacystatement) .