Security Architect (Cybersecurity)

Spyrosoft is a software engineering company established in 2016, specializing in technology solutions for industry 4.0, automotive, geospatial, healthcare & life sciences, employee experience & education, and financial services industries. The company has been recognized as one of the fastest growing technology companies in Europe in 2021 and 2022.

• Strong commercial experience in Cyber Security and Security Architecture.
• Hands-on experience performing security architecture assessments and reviews.
• Experience with Cloud Security Assessments and security risk analysis.
• Strong understanding of Identity & Access Management (IAM), Network Security, Network Segmentation, Authentication and Authorization, Encryption and Data Protection, and Security Logging and Monitoring.
• Knowledge of security standards, frameworks, controls, and governance principles.
• Experience assessing connectivity and infrastructure security requirements, including firewall, proxy, and internet access use cases.
• Ability to translate technical security findings into business-focused recommendations.
• Strong analytical, problem-solving, and documentation skills.
• Experience working with cross-functional technical and business teams.

Nice to have:

• German language proficiency.
• Experience working in international and multinational environments.
• Security certifications such as CISSP, CCSP, SABSA, TOGAF, Azure Security Engineer, AWS Security Specialty, or equivalent.
• Experience using AI tools in day-to-day workflow.

• Review solution concepts, architectures, and technical documentation to identify applicable security standards, security risks, and required controls.
• Conduct Security Architecture Reviews, Cloud Security Assessments, and Vendor Security Assessments.
• Evaluate solutions from a security perspective across: Identity & Access Management (IAM), Network architecture and segmentation, Authentication and authorization mechanisms, Encryption and data protection, Logging and monitoring, Security controls and risk management.
• Assess firewall, proxy, server internet access, and connectivity-related requests, considering business requirements, communication flows, security controls, monitoring, and data processing implications.
• Provide clear and actionable security recommendations to both technical and non-technical stakeholders.
• Prepare architecture review reports and security assessment documentation.
• Support security governance activities by advising on security standards, policies, and best practices.
• Collaborate with project teams to implement and improve secure architecture patterns.
• Contribute to the continuous improvement of security review methodologies, assessment frameworks, and documentation standards.