Senior Solutions Architect – Vulnerability/Exposure Management

This is a fully remote position, open to applicants in Texas.

📋 Description

• Lead intricate client engagements as the senior architect for modernizing vulnerability management, developing CTEM programs, designing exposure management architecture, and implementing risk-based remediation strategies.

• Evaluate clients' capabilities in vulnerability and exposure management, along with their technologies, processes, and operational maturity.

• Create target-state architectures that integrate vulnerability scanning, attack surface management, cloud and container security, identity exposure, and attack path analysis.

• Develop and operationalize CTEM programs focused on exposure discovery, prioritization, validation, and remediation.

• Establish risk-based prioritization methodologies utilizing CVSS, EPSS, CISA KEV, threat intelligence, asset criticality, exploitability, compensating controls, and business context.

• Design operating models that encompass asset ownership, remediation workflows, SLAs, exception management, risk acceptance, executive reporting, and team integration.

• Create automation and orchestration workflows for normalizing findings, enrichment, ticketing, workflow integration, and validating remediation.

• Assess and incorporate AI-assisted and agentic capabilities, ensuring governance and human oversight.

• Integrate threat-informed validation, attack path analysis, breach and attack simulation, penetration testing, and purple-team findings.

• Collaborate with SOC/SIEM architects to merge exposure intelligence with detection and response platforms.

• Develop reference architectures, assessment methodologies, solution briefs, packaged offerings, and delivery playbooks.

• Work alongside Security Solutions practices, regional teams, Managed Services, and Service Delivery.

• Act as a technical representative for strategic security technology partners.

• Assist account teams with technical discovery, solution architecture, competitive positioning, proposals, SOWs, effort estimation, and technical validation.

• Provide technical enablement, conduct workshops, and lead knowledge-sharing sessions; mentor junior architects and early-career professionals.

• Offer secondary architectural and presales support across SIEM/SOAR, EDR/XDR, SOC modernization, threat intelligence, and AI-enabled security operations.

• Represent Trace3 at executive briefings, partner engagements, industry events, thought leadership initiatives, and technical presentations.

⛳️ Requirements

• Bachelor’s degree in Computer Science, Cybersecurity, Information Security, Engineering, or a related field from an accredited institution, or equivalent knowledge and experience acquired through industry, military, defense, or government operations.

• Over 8 years of experience in cybersecurity, with substantial hands-on experience in designing, implementing, operating, or modernizing enterprise vulnerability management or exposure management programs beyond mere product implementation.

• Experience in a customer-facing presales, solutions architecture, or technology consulting role within a VAR, systems integrator, consultancy, or technology vendor.

• Profound technical expertise in enterprise vulnerability management, risk-based vulnerability prioritization, CTEM principles, exposure assessment, and the remediation lifecycle.

• Proven experience with leading vulnerability and exposure management technologies, such as Tenable, Qualys, Rapid7, CrowdStrike Falcon Exposure Management, Wiz, Axonius, XM Cyber, or similar enterprise platforms.

• Capability to design target-state architectures for vulnerability and exposure management, including platform consolidation, technology integration, program modernization, and scalable operating models.

• Experience in developing or managing enterprise vulnerability management programs, covering asset discovery, inventory and ownership, vulnerability identification, findings normalization, risk prioritization, remediation tracking, exception management, and executive-level reporting.

• Familiarity with CVSS, EPSS, CISA KEV, and SSVC.

• Knowledge of EASM, CAASM, attack path analysis, breach and attack simulation, and adversarial validation techniques.

• Experience with integrating platforms with CMDB, ITSM, SOAR, cloud security platforms, and security analytics solutions.

• Familiarity with AWS, Azure, and GCP, including aspects of cloud workload security, container security, native security tooling, and cloud vulnerability and exposure management.

• Practical understanding of automation, orchestration, and AI-enhanced security capabilities.

• Working knowledge of SIEM/SOAR, EDR/XDR, threat detection and response, and SOC operations.

• Familiarity with CrowdStrike, Palo Alto Networks Cortex XSIAM, Microsoft Sentinel, Splunk, or Google SecOps.

• Knowledge of NIST CSF, NIST SP 800-40, CIS Controls, MITRE ATT&CK, ISO 27001, and CTEM-aligned exposure management frameworks.

• Ability to conduct technical workshops, security assessments, architectural reviews, and executive briefings.

• Experience in creating technical documentation, presentations, architectural designs, implementation plans, proposals, SOWs, and strategic roadmaps.

• Excellent executive communication, interpersonal, collaboration, and customer presentation skills.

• Strong problem-solving abilities, organizational skills, attention to detail, and time management capabilities.

• Capacity to manage multiple and changing priorities while adhering to deadlines.

• Willingness to travel as required (approximately 25–35%); must possess a valid driver’s license.

🏝️ Benefits

• Comprehensive medical, dental, and vision plans for you and your dependents.

• 401(k) Retirement Plan with Employer Match.

• 529 College Savings Plan.

• Health Savings Account.

• Life Insurance.

• Long-Term Disability.

• Competitive Compensation.

• Training and development programs.

• Major offices stocked with snacks and beverages.

• Collaborative and cool culture.

• Work-life balance.

• Generous paid time off.