Cybersecurity Architecture Specialist

About the role

Eurofins' Group Architecture Office provides enterprise and solution architecture consultancy at Group IT Solutions level and across the business, supporting infrastructure and application projects. It is looking for a Security Architect to act as a trusted security advisor on several projects across different business areas and geographies. You will identify major security gaps and define pragmatic ways to fix them at scale, ensuring that Group Architecture, DevOps and Cloud Engineering platforms are securely architected, designed, built, configured, tested and deployed according to Eurofins IT Security policies.

Key responsibilities

• Build close collaboration with IT Security, operations, infrastructure, development and Group Architecture teams.
• Define security practices and security testing for DevOps teams.
• Help develop and follow up on security strategy, roadmap and projects with Enterprise, Solution and DevOps architects and IT Security.
• Run proof-of-concept evaluations of new technologies or products with program developers and IT Security.
• Lead technical security for platform and solution implementation and transformation, and collaborate on architecture reviews, security assessments and vulnerability management.
• Promote secure application design and architecture based on industry standards and frameworks.
• Develop security architecture designs and blueprints for the target state, and validate and communicate them with IT Security and Solution Architects.
• Promote a security culture across DevOps, Cloud and GSC IT Solutions programs.

Required profile

• Bachelor's degree in IT, engineering or a related field.
• Active entry-level security certification such as CompTIA Security+, Microsoft SC-900 or similar.
• Active entry-level cloud certification such as AZ-900, AWS Certified Cloud Practitioner or similar.
• At least 2 years of experience in security (cloud, infrastructure, software architecture or application security).
• Previous experience in solution design, system development methodologies and software lifecycles across system and application architectures.
• Strong written and spoken English.

Required skills

• Knowledge of identity management, PKI, log management and multifactor authentication tools.
• Vulnerability management, penetration testing, SAST, DAST and SCA.
• Server management, virtualization, networking and systems management.
• Working knowledge of CNAAP solutions and automated security tooling in DevOps environments.