Security Architect (AWS/GCP)

Location: Newton, MA, United States; hybrid arrangement with in-person work three days a week or more and flexibility to work from home or remotely at other times.

Salary: $175K–$200K per year, based on experience.

Company

Informa TechTarget is a B2B technology information and digital services organization with technology-focused websites, first-party audience data, advertising, content, intelligence, and demand-generation services.

What you will do

• Own the enterprise security architecture vision, roadmap, reference architectures, governance frameworks, security principles, metrics, and executive reporting.
• Design cloud and infrastructure security across AWS, GCP, hybrid, and on-premises environments, including CSPM, CIEM, Wiz remediation, IAM, Zero Trust, network segmentation, encryption, logging, SIEM, endpoint security, and threat detection.
• Lead Secure SDLC and DevSecOps initiatives, integrating security controls into CI/CD pipelines and guiding development and DevOps teams on secure architecture and coding practices.
• Conduct threat modeling, risk analysis, security assessments, audits, vulnerability remediation, and incident response while ensuring compliance with ISO 27001, SOC 2, GDPR, SOX, and related standards.
• Lead security architecture for emerging technologies, including AI/LLM initiatives, and advise leaders on security risks and technology decisions.
• Mentor cross-functional teams and produce security documentation, architecture diagrams, design specifications, and control matrices.

Requirements

• Bachelor’s or master’s degree in computer science, information technology, or a related field.
• 7+ years of cybersecurity experience with deep cloud security expertise.
• Proven experience leading enterprise security architecture in multi-cloud environments.
• Deep understanding of AWS and GCP security best practices, organization policies, automated threat detection, centralized logging and SIEM, least-privilege architecture, VPC and perimeter controls, data-exfiltration prevention, encryption and key management, and IAM.
• Expertise in web application security testing and vulnerability mitigation using OWASP-related tools and methodologies.
• Experience with network vulnerability scanning, penetration testing, security auditing, and industry-standard security testing platforms.
• Proficiency securing containerized environments, including Docker and Kubernetes, using tools such as Trivy or Aqua Security.
• Ability to lead security discussions with system architects and business leaders, with strong analytical and computer skills.
• Expert-level understanding of cybersecurity and its impact on modern business; thorough understanding of Unix operating systems and NIST, COBIT, ISO, and SOC 2 frameworks.
• Certifications such as CISSP, CCSP, AWS Security Specialty, or Google Professional Cloud Security Engineer.

Culture & Benefits

• Collaborative work with international teams in an organization committed to sustainability, diversity, wellbeing, and ethical working practices.
• Open vacation, 10 national holidays, and up to four days per year for volunteering.
• Training, mentoring, LinkedIn Learning access, and support for internal career moves.
• Competitive benefits including 401(k) matching, health, vision and dental insurance, parental leave, and an ESPP with company shares offered at a minimum 15% discount.
• Wellbeing support through an employee assistance program, mental health first aiders, and a wellness app.
• Work from almost anywhere for up to four weeks per year, subject to applicable conditions.

Hiring process

• The posting automatically expires on November 11, 2026.
• Reasonable workplace accommodations can be requested from the Talent Acquisition Partner during the hiring process.