Architect secure cloud and hybrid solutions supporting FinTech and regulated enterprise systems.
Develop, maintain, and own System Security Plans (SSPs) and supporting compliance artifacts.
Lead security authorization activities, including ATO package development and continuous monitoring.
Apply and interpret CNSSI 1253, NIST SP 800-53, PCI-DSS, SOC 2, ISO, GLBA, and related security controls.
Conduct security risk assessments, gap analyses, and vulnerability remediation planning.
Implement and oversee secure SDLC practices and system hardening standards.
Collaborate with engineering, infrastructure, compliance, and DevOps teams to enforce secure-by-design principles.
Support audit readiness, penetration testing coordination, and incident response planning.
Utilize tools such as eMASS, ACAS, Tenable.io, and Nessus for compliance and vulnerability management.
Contribute to cross-functional initiatives (approximately 20%) beyond primary Payments efforts.

Requirements

U.S. Citizenship required.
Bachelor’s or Master’s Degree in Cybersecurity, Information Systems, or related field.
Active Secret Security Clearance or ability to obtain one.
7+ years of cybersecurity architecture experience in federal or large enterprise environments.
Strong FinTech security experience (PCI-DSS, GLBA, CCPA, SOC 2, ISO frameworks).
Experience with CNSSI 1253, NIST SP 800-53, FedRAMP, and federal compliance frameworks.
Hands-on experience with eMASS, Tenable.io, Nessus, and vulnerability management platforms.
Experience securing AWS, Azure, or GCP in regulated environments.
Strong documentation skills with ability to produce audit-ready materials.

Benefits

Health insurance
Dental insurance
Vision insurance
Life Insurance
401(k) Retirement Plan with matching
Paid Time Off
Paid Federal Holidays

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

cybersecurity architecturesystem security planssecurity risk assessmentsvulnerability remediation planningsecure SDLC practicessecurity authorization activitiespenetration testingincident response planningcompliance artifactsgap analyses

Soft Skills

collaborationdocumentationleadershiporganizational skillscommunication

Certifications

Bachelor’s Degree in CybersecurityMaster’s Degree in CybersecurityActive Secret Security Clearance