Senior Security Architect Vulnerability Management (AWS)

TL;DR

Senior Security Architect Vulnerability Management (AWS): Building and scaling an end-to-end vulnerability management and application security program across AWS, hybrid infrastructure, containers, and application code with an accent on risk-based remediation, cloud security architecture, and developer pipeline integration. Focus on designing security controls, automating SAST, DAST, SCA, and secret scanning, and driving measurable risk reduction across engineering and IT.

Location: Remote within the United States; the role requires working effectively in a remote environment and attending virtual meetings with the camera on.

Company

hirify.global provides software solutions and streamlined workflows for automotive parts manufacturers, dealers, suppliers, shops, repairers, and service providers.

What you will do

• Build and oversee a unified vulnerability management lifecycle across AWS, co-located infrastructure, containers, and application code.
• Define remediation SLAs and executive metrics covering MTTR, SLA compliance, patch coverage, and risk reduction.
• Embed SAST, DAST, SCA, secret scanning, and Terraform security checks into CI/CD pipelines.
• Design AWS security standards and architectures, including continuous compliance controls for cloud configurations and IaC.
• Partner with Engineering, DevOps, IT Infrastructure, and Systems teams to improve patch management and secure development practices.
• Track emerging threats, zero-day vulnerabilities, and active exploits, and coordinate vulnerability assessments, penetration tests, and remediation verification.

Requirements

• At least 6 years of hands-on cybersecurity experience, including senior or lead security engineering or security architecture work.
• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or a related field, or equivalent relevant experience.
• Deep practical experience writing and deploying Terraform in hybrid environments.
• Strong knowledge of AWS security services, including GuardDuty, Security Hub, IAM, KMS, and organization-level controls.
• Knowledge of SecOps, SIEM architecture, detection and response, vulnerability management, cloud misconfiguration, and configuration drift.
• Strong collaboration, communication, prioritization, and executive reporting skills.

Culture & Benefits

• Remote work with limited opportunities for in-person interaction.
• Flexibility across teams operating in multiple time zones and international communities.
• Collaborative problem-solving with Engineering, DevOps, IT, and software development teams.
• Supportive environment focused on empowerment, learning, growth, and innovation.
• Virtual meetings with the laptop camera on are required.