Director, Security Architecture – Vulnerability Management and Response

🔥 0 minutes ago

❄️ Minnesota – Remote

❄️ Minnesota – Remote

💵 $178k - $296.7k / year

⏰ Full Time

🔴 Lead

👮‍♂️ Cybersecurity / Security Engineer

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Omnissa

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

🤖 Artificial Intelligence

🏢 Enterprise

Artificial Intelligence • Enterprise • Healthcare

Omnissa is a tech company that offers an AI-driven digital work platform designed to enhance employee experiences and streamline IT operations. Their solutions include unified endpoint management, virtual desktops and applications, and security compliance, aiming to empower a productive workforce across various industries such as healthcare, financial services, and retail. Omnissa's innovative approach provides secure, cloud-native solutions that adapt to the evolving needs of businesses and their employees.

📋 Description

• Set the multi-year strategy and roadmap aligned to Omnissa's risk appetite and business objectives. • Lead, mentor, and grow a globally distributed team of senior security engineers and architects across AMER and APAC. • Serve as the senior escalation point for design conflicts and remediation prioritization decisions, and for security incidents surfaced through the vulnerability response (PSIRT) process. • Represent the function to executive leadership, translating technical risk into business terms and reporting on posture, progress, and investment needs. • Partner with all lines of business to establish security standards, perform architecture and design reviews, and embed security into every stage of design and implementation. • Drive security framework development, hardening standards, and policy adherence across the enterprise. • Conduct risk assessments and requirements gathering for new infrastructure, products, and services, ensuring controls are defined before deployment. • Partner closely with Product Security and engineering to define security architecture requirements across the SDLC and CI/CD ecosystem, including threat modeling, architecture standards, SAST, DAST, software composition analysis, secrets detection, and artifact/image signing, ensuring security controls are built into development and deployment workflows from design through release. • Drive secure-by-design practices across the enterprise, reference architectures, secure design patterns, and paved-road templates that make the secure path the default path for engineering teams, reducing reliance on after-the-fact review. • Own the end-to-end Exposure Management program, the tooling, scanners, processes, and SLAs that identify, prioritize, and remediate risk across all environments. • Own the enterprise PSIRT strategy, partnering with the team on intake, triage, and coordinated response for vulnerabilities in Omnissa products and services.

🎯 Requirements

• 10+ years in information security, including 5+ years leading technical security teams (engineering, architecture, and/or Exposure/Vulnerability Management), preferably at global SaaS companies. • Experience building and operating enterprise identity security strategy, including IAM/PAM architecture, authentication standards, and identity threat detection. • Deep hands-on background across multiple domains: cloud and network security, endpoint/workload protection, Exposure/Vulnerability Management, and Product Security/SDLC. • Working knowledge of data governance principles (classification, residency, retention) and major compliance/regulatory frameworks — including GDPR, CCPA, and CMMC alongside those listed above; AI risk frameworks a plus. • Proven track record partnering with engineering teams at a global SaaS company to drive security outcomes through influence and collaboration rather than mandate. • Experience with the full risk lifecycle: risk assessment, requirements gathering, control design, tool selection, vendor negotiation, and remediation oversight. • Strong communication skills with the ability to influence executives and engineers alike. • Hands-on experience partnering with Product/Application Security teams to integrate security into SDLC and CI/CD pipelines • Practical experience with threat modeling methodologies and driving secure-by-design outcomes at the architecture stage, before code is written. • Experience operating across a globally distributed team and supporting 24x7 service models.

🏖️ Benefits

• employee ownership • health insurance • 401k with matching contributions • disability insurance • paid-time off • growth opportunities • more