Senior Solutions Architect | Vulnerability/Exposure Management (Remote)

Description

The company is a transformative IT authority that delivers technology solutions and consulting services, helping IT executives gain a competitive edge through integrating, automating and innovating.

The company describes its culture as startup-like but backed by a scalable business, with room to grow a career.

Headquartered in Irvine, California, with more than 1,200 employees across the United States. Major field offices are in Denver, Indianapolis, Grand Rapids, Lexington, Los Angeles, Louisville, Texas and San Francisco.

This senior solutions architect role sits in Security Operations and centers on vulnerability and exposure management: risk-based vulnerability management, Continuous Threat Exposure Management (CTEM), attack surface management, threat-informed prioritization, attack path analysis and remediation operations.

The goal is to help organizations move from traditional scanning and reporting to continuous, risk-driven exposure programs that combine people, process and technology to measurably lower cyber risk.

The role works under Security Operations leadership, leads the most complex client architecture engagements in these areas, and turns that work into reference architectures, repeatable offerings and enablement so regional technical teams can sell and deliver consistently.

This is a client-facing presales role that also works across the wider Security Operations practice, supporting SOC modernization, SIEM/XDR, threat detection and response, and AI-enabled security operations.

Remote position.

Responsibilities

• Lead complex client engagements as the senior architect for vulnerability management modernization, CTEM programs, exposure management architecture and risk-based remediation, from discovery and assessment through solution design and executive readout.
• Assess a client's vulnerability and exposure capabilities, tools, processes and maturity, and give strategic, tactical and operational recommendations tied to business risk and measurable outcomes.
• Design target-state architectures that combine vulnerability scanning, external and internal attack surface management (EASM/CAASM), cloud and container security, identity exposure and attack path analysis into one prioritized view of risk.
• Build and run CTEM programs with continuous discovery, prioritization, validation and remediation, backed by governance, clear accountability and ongoing improvement.
• Define risk-based prioritization methods that weigh CVSS, EPSS, CISA KEV, threat intelligence, asset criticality, exploitability, compensating controls and business context.
• Design operating models covering asset ownership, remediation workflows, SLAs, exception handling, risk acceptance, executive reporting and coordination with IT, infrastructure, cloud and application teams.
• Design automation and orchestration for findings normalization, enrichment, remediation ticketing, workflow integration and closed-loop validation of fixes.
• Evaluate and add AI-assisted and agentic capabilities for prioritization, finding correlation, remediation recommendations and reporting, with suitable governance and human oversight.
• Use threat-informed validation such as attack path analysis, breach and attack simulation, penetration testing and purple-team results to confirm exposure severity, set remediation priority and measure posture gains.
• Work with SOC and SIEM architects so exposure context feeds detection, incident prioritization and day-to-day security operations decisions.
• Build and maintain reusable reference architectures, assessment methods, solution briefs, packaged offerings and delivery playbooks, and help grow the wider Security Operations practice.
• Work with security solutions practices, regional teams, managed services and service delivery to scope, design and hand off engagements that can be delivered consistently.
• Act as senior technical contact for strategic partners in vulnerability management, exposure management, cloud security and security operations, supporting joint solutions, enablement and go-to-market work.
• Support account teams on qualified deals through discovery, solution design, competitive positioning, proposals, SOWs, effort estimates and technical validation.
• Create and deliver enablement, workshops and knowledge-sharing sessions for regional architects, sellers and delivery teams, and mentor junior architects and early-career practitioners.
• Keep working knowledge of adjacent domains (SIEM/SOAR, EDR/XDR, SOC modernization, threat intelligence and AI-enabled security operations) and provide secondary architecture and presales support when needed.
• Represent the company in customer executive briefings, partner engagements, industry events, thought leadership and technical presentations.

Requirements

• Bachelor's degree in computer science, cybersecurity, information security, engineering or a related field from an accredited institution, or equivalent measurable knowledge and experience gained through industry, military, defense or government work.
• 8+ years in cybersecurity, with substantial hands-on experience designing, running or modernizing enterprise vulnerability or exposure management programs, beyond only deploying products.
• Experience in a customer-facing presales, solutions architecture or technology consulting role at a VAR, systems integrator, consultancy or technology vendor.
• Deep knowledge of enterprise vulnerability management, risk-based prioritization, CTEM principles, exposure assessment and the remediation lifecycle.
• Proven experience with leading vulnerability and exposure platforms such as Tenable, Qualys, Rapid7, CrowdStrike Falcon Exposure Management, Wiz, Axonius, XM Cyber or comparable enterprise products. Deep expertise in at least one major platform is required; working familiarity with others is preferred.
• Proven ability to design target-state architectures, including platform consolidation, technology integration, program modernization and scalable operating models.
• Experience building or running enterprise vulnerability programs covering asset discovery, inventory and ownership, vulnerability identification, findings normalization, risk prioritization, remediation tracking, exception management and executive reporting.
• Solid grasp of CVSS, EPSS, CISA KEV and SSVC, and the ability to bring threat intelligence, exploitability and business context into defensible remediation decisions.
• Familiarity with EASM, CAASM, attack path analysis, breach and attack simulation and adversarial validation techniques.
• Experience connecting vulnerability and exposure platforms to enterprise systems such as CMDB, ITSM, SOAR, cloud security platforms and security analytics to enable scalable remediation and reporting.
• Working knowledge and experience with AWS, Azure and GCP, including cloud workload security, container security, native security tools and cloud exposure considerations.
• Practical understanding of automation, orchestration and AI-assisted security, including use in prioritization, remediation workflows, threat intelligence enrichment and exposure reporting.
• Working knowledge of SIEM/SOAR, EDR/XDR, threat detection and response and SOC operations, with the ability to support cross-domain architecture and provide secondary technical help.
• Understanding of how exposure intelligence works with CrowdStrike, Palo Alto Networks Cortex XSIAM, Microsoft Sentinel, Splunk or Google SecOps to improve detection and operations.
• Working knowledge of NIST CSF, NIST SP 800-40, CIS Controls, MITRE ATT&CK, ISO 27001 and CTEM-aligned exposure frameworks.
• CISSP, CCSP, GIAC or relevant cloud security and vendor architecture certifications are highly preferred.
• Prior experience building packaged offerings, reference architectures, assessment methods, technical playbooks or certification and enablement programs is highly preferred.
• Ability to run technical workshops, security assessments, architecture reviews and executive briefings, turning complex findings into clear recommendations and business outcomes.
• Experience producing technical documentation, presentations, architecture designs, implementation plans, proposals, SOWs and strategic roadmaps.
• Strong executive communication: explaining complex cyber risk, justifying technology spend and defending architecture decisions to technical and business audiences.
• Strong interpersonal, communication, collaboration and customer presentation skills.
• Self-motivated, with strong problem-solving skills and the confidence to work directly with customers on complex security problems.
• Highly organized and detail-oriented, with strong time management and the ability to set priorities in a fast-paced, changing environment.
• Comfortable juggling multiple, shifting priorities and meeting deadlines in an entrepreneurial setting.
• Able to travel when needed, approximately 25, 35% of the time, and hold a valid driver's license.

Conditions

Remote work.

Travel of approximately 25, 35% when needed; a valid driver's license is required.

Actual salary depends on location, experience, skill set, performance, licensure and certification, and business needs. Ranges in other locations may differ.

Some positions may also be eligible for variable incentive pay, such as bonuses or commissions, which is not part of base salary.

Estimated pay range: $175,000 - $200,000 USD.

The company is an equal opportunity employer that makes decisions based on qualifications, merit and business needs, and does not discriminate on protected characteristics. Demographic information is voluntary, kept confidential under EEO rules, and not used in hiring, promotion or mentorship decisions.

Benefits

• Comprehensive medical, dental and vision coverage for you and your dependents.
• 401(k) with employer match, 529 college savings plan, health savings account, life insurance and long-term disability.
• Competitive compensation.
• Training and development programs.
• Major offices stocked with snacks and beverages.
• Collaborative culture.
• Work-life balance and generous paid time off.