Principal Cybersecurity Architect

Riverwoods, IL, United States

Discover. A brighter future.

With us, you’ll do meaningful work from Day 1. Our collaborative culture is built on three core behaviors: We Play to Win, We Get Better Every Day & We Succeed Together. And we mean it — we want you to grow and make a difference at one of the world's leading digital banking and payments companies. We value what makes you unique so that you have an opportunity to shine.

Come build your future, while being the reason millions of people find a brighter financial future with Discover.

Job Description: At Discover, be part of a culture where diversity, teamwork and collaboration reign. Join a company that is just as employee-focused as it is on its customers and is consistently awarded for both. We’re all about people, and our employees are why Discover is a great place to work. Be the reason we help millions of consumers build a brighter financial future and achieve yours along the way with a rewarding career.

As a Cyber Security Architect, you will be part of the Cybersecurity Architecture Team focused on helping design, implement and mature innovative and cutting-edge security capabilities. The Cybersecurity Architecture Team champions secure by design principles into our initiatives, provides hands on technical leadership for security domains, assists with defining vision and execution of strategy aligning to business needs and is expected to help solve wide range of security challenges. The Cybersecurity Architecture Team is part of a highly collaborative Cybersecurity program and an engineering culture driven technology organization. Actively manages and escalates risk and customer-impacting issues within the day-to-day role to management.

Responsibilities

Designs, updates and maintains security architecture capabilities for several products in assigned domain (e.g., Application, Cryptography, Endpoint, Network, Cloud, or IAM) optimizes functionality, minimizes risk, and aligns with business objectives

Evaluates technical solutions and incorporates emerging and strategic cybersecurity technologies into technical solutions, considering costs, business benefits, technical limitations, risks and compliance considerations to align with cybersecurity objectives, enterprise and portfolio future state architecture direction. Stays current on relevant industry compliance requirements and incorporates them into strategic plans

Solicits and analyzes functional and non-functional requirements to identify architecturally significant decisions and develop options, tradeoffs, and recommendations

Works closely with key cybersecurity stake holders such as Cybersecurity Product leadership, Engineers, and consumers of security services to identify risks, define and design tactical and strategic risk mitigation plans and execution of these accordingly

Advises and guides product team and helps with project planning by identifying architecturally significant dependencies and guiding the approach to project execution. ü Effectively communicates across departments and leadership groups and builds consensus in support of strategic objectives

Partners with product leadership to develop and establish a product vision and roadmap while ensuring it aligns with the cybersecurity strategy, enterprise technology strategy, and industry trends, inclusive of build vs buy decisions

Partners with key stake holders from Enterprise, Technical and Application Architecture to champion secure by design principles, perform security architecture analysis and help deliver secure and reliable solutions

Builds usable security patterns, security product roadmaps, capability maturity models and other best practice artifacts

Coaches and mentors' engineers and less experienced architects

Minimum Qualifications

At a minimum, here’s what we need from you:

Bachelors – Computer Science or related

8+ Years – Information Security, Engineering, Business Administration, Data Analytics, Technical Architecture or related

Internal applicants only: technical proficiency rating of proficient on the Dreyfus architecture scale

Preferred Qualifications

Bonus Points If You Have:

Cross domain knowledge of more than one component of the Cybersecurity ecosystem- AppSec, Cryptography & Data Security, Endpoint Security, Identity and Access Management, Network Security, and Cloud.

Experience with DevOps or traditional application development.

Experience with K8s, Open Shift Container Platform, or Pivotal Cloud Foundry.

Experience in Cloud Service Providers - Amazon Web Services, Google Cloud Platform, or Microsoft Azure.

Experience with API security best practices and configuration.

Experience with Red Hat Enterprise Linux, Microsoft Windows, Microsoft Windows Server, and MacOS.

Experience with the MITRE ATT&CK framework.

Experience in common endpoint scripting constructs- bash, PowerShell, or python.

Familiarity with the Microsoft M365 ecosystem.

Experience with the Open Web Application Security Project Top 10 and remediating vulnerabilities.

Experience with Network Security best practices.

Experience with secrets management best practices and integrations within pipelines.

Experience with IAM technologies such as- identity providers, identity directories, secrets management, privileged access management, multi-factor authenticators, role and attribute-based authorizations, user lifecycle management, and the principle of least privilege.

Industry certifications such as CISSP, SANS/GIAC, AWS, GCP, or Microsoft.

External applicants will be required to perform a technical interview.

#LI-MF1

Application Deadline:

The application window for this position is anticipated to close on Jan-21-2024. We encourage you to apply as soon as possible. The posting may be available past this date, but it is not guaranteed. Compensation:

The base pay for this position generally ranges between $148,000.00 to $204,000.00. Additional incentives may be provided as part of a market competitive total compensation package. Factors, such as but not limited to, geographical location, relevant experience, education, and skill level may impact the pay for this position. Benefits:

We also offer a range of benefits and programs based on eligibility. These benefits include:

Paid Parental Leave

Paid Time Off

401(k) Plan

Medical, Dental, Vision, & Health Savings Account

STD, Life, LTD and AD&D

Recognition Program

Education Assistance

Commuter Benefits

Family Support Programs

Employee Stock Purchase Plan

Learn more at MyDiscoverBenefits.com.

What are you waiting for? Apply today!

All Discover employees place our customers at the very center of our work. To deliver on our promises to our customers, each of us contribute every day to a culture that values compliance and risk management.

Discover is committed to a diverse and inclusive workplace. Discover is an equal opportunity employer and does not discriminate on the basis of race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, protected veteran status, or other legally protected status. (Know Your Rights)