Director, Security Architecture – Vulnerability Management and Response

Omnissa

Director of Security Architecture at Omnissa, shaping security strategies and leading risk management efforts. Focused on vulnerability and response for AI-driven work platform.

Posted 7/14/2026full-timeRemote • Minnesota • 🇺🇸 United StatesLead💰 $178,000 - $296,700 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive expertise in information security leadership, including risk management, security architecture, and vulnerability management, while effectively collaborating with engineering teams to integrate security into the software development lifecycle. Proven ability to influence stakeholders and drive security outcomes across a globally distributed organization.

Highest-signal resume keywords

Information Security LeadershipVulnerability ManagementSecurity ArchitectureRisk AssessmentIdentity Security Strategy

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Cloud SecurityNetwork SecurityEndpoint ProtectionThreat ModelingSecure Design PracticesIAM ArchitecturePAM ArchitectureSASTDASTSoftware Composition Analysis

Soft Skills

Strong CommunicationInfluencing SkillsMentoring

Tools & Technologies

CI/CD PipelinesSecurity FrameworksExposure Management ToolsVulnerability Scanners

Industry Keywords

GDPRCCPACMMCData GovernanceAI Risk Frameworks

Tech Stack

Tools & technologies

CloudSDLC

About the role

Key responsibilities & impact

Set the multi-year strategy and roadmap aligned to Omnissa's risk appetite and business objectives.
Lead, mentor, and grow a globally distributed team of senior security engineers and architects across AMER and APAC.
Serve as the senior escalation point for design conflicts and remediation prioritization decisions, and for security incidents surfaced through the vulnerability response (PSIRT) process.
Represent the function to executive leadership, translating technical risk into business terms and reporting on posture, progress, and investment needs.
Partner with all lines of business to establish security standards, perform architecture and design reviews, and embed security into every stage of design and implementation.
Drive security framework development, hardening standards, and policy adherence across the enterprise.
Conduct risk assessments and requirements gathering for new infrastructure, products, and services, ensuring controls are defined before deployment.
Partner closely with Product Security and engineering to define security architecture requirements across the SDLC and CI/CD ecosystem, including threat modeling, architecture standards, SAST, DAST, software composition analysis, secrets detection, and artifact/image signing, ensuring security controls are built into development and deployment workflows from design through release.
Drive secure-by-design practices across the enterprise, reference architectures, secure design patterns, and paved-road templates that make the secure path the default path for engineering teams, reducing reliance on after-the-fact review.
Own the end-to-end Exposure Management program, the tooling, scanners, processes, and SLAs that identify, prioritize, and remediate risk across all environments.
Own the enterprise PSIRT strategy, partnering with the team on intake, triage, and coordinated response for vulnerabilities in Omnissa products and services.

Requirements

What you’ll need

10+ years in information security, including 5+ years leading technical security teams (engineering, architecture, and/or Exposure/Vulnerability Management), preferably at global SaaS companies.
Experience building and operating enterprise identity security strategy, including IAM/PAM architecture, authentication standards, and identity threat detection.
Deep hands-on background across multiple domains: cloud and network security, endpoint/workload protection, Exposure/Vulnerability Management, and Product Security/SDLC.
Working knowledge of data governance principles (classification, residency, retention) and major compliance/regulatory frameworks — including GDPR, CCPA, and CMMC alongside those listed above; AI risk frameworks a plus.
Proven track record partnering with engineering teams at a global SaaS company to drive security outcomes through influence and collaboration rather than mandate.
Experience with the full risk lifecycle: risk assessment, requirements gathering, control design, tool selection, vendor negotiation, and remediation oversight.
Strong communication skills with the ability to influence executives and engineers alike.
Hands-on experience partnering with Product/Application Security teams to integrate security into SDLC and CI/CD pipelines
Practical experience with threat modeling methodologies and driving secure-by-design outcomes at the architecture stage, before code is written.
Experience operating across a globally distributed team and supporting 24x7 service models.

Benefits

Comp & perks

employee ownership
health insurance
401k with matching contributions
disability insurance
paid-time off
growth opportunities
more