Join our dynamic security team as an experienced Information Security Architect. This role focuses on identifying and mitigating security risks across systems, applications, and networks, with a strong emphasis on threat modeling, security architecture, and cyber resilience. You'll collaborate with cross-functional teams to implement robust security measures and protect enterprise assets.

Deloitte's Cybersecurity practice empowers organizations to prevent cyberattacks and safeguard valuable assets. We advocate for a secure, vigilant, and resilient approach, managing cyber risk to unlock new opportunities and embedding security at the core of strategy development.

Develop and implement advanced threat models using methodologies like STRIDE, DREAD, and PASTA for both on-premises and cloud systems. Conduct thorough risk assessments to pinpoint security weaknesses and devise mitigation strategies for IT and cloud infrastructure. Integrate security best practices into cloud application architectures, ensuring security is a foundational element.

Review system designs and architectures to identify vulnerabilities and design effective security controls. Provide recommendations for enhancing the overall security posture and stay abreast of cloud security trends, emerging threats, and attack vectors.

Collaborate with various teams to address security issues, implement action plans, and ensure compliance with standards like NIST 800-53 and ISO 27002. Create detailed reports on risks, mitigation strategies, and improvement recommendations, while acting as a subject matter expert on cloud security.

A Bachelor's or Master's degree in Computer Science, Information Security, Cybersecurity, or a related field is required. Industry-recognized certifications such as CISSP, CCSP, ISO 27001, CISM, or CEH are highly desirable.

We seek candidates with 5-12 years of experience in information security, specifically in security architecture, cloud security, threat modeling, and risk assessments. Proven experience with threat modeling methodologies (STRIDE, DREAD, PASTA) and tools, along with expertise in cloud security platforms (AWS, Azure, GCP) and best practices, is essential.

Familiarity with common security vulnerabilities (OWASP Top 10), SDLC security integration, and cloud governance models is expected. Excellent communication, collaboration, analytical skills, and attention to detail are crucial for success in this role. Experience in the automotive industry is a plus.