Cybersecurity Architect IV

57574BR

Job Summary:

General Atomics (GA), and its affiliated companies, is one of the world’s leading resources for high-technology systems development ranging from the nuclear fuel cycle to remotely piloted aircraft, airborne sensors, and advanced electric, electronic, wireless and laser technologies.

DUTIES AND RESPONSIBILITIES:

We currently have an exciting opportunity for a Cybersecurity Architect to join our corporate ITS Cybersecurity Threat Management Team. This role is located in Rancho Bernardo, CA.

DUTIES AND RESPONSIBILITIES:

Primary Focus

Architect large-scale security enforcement frameworks, automate security solutions, and support enterprise-wide security initiatives. Focuses on deploying and configuring security enforcement technologies, with complex changes and advanced troubleshooting remaining under engineering responsibility. Additionally, this role takes on initial cybersecurity architecture responsibilities, architecting and building secure solutions for the business and international locations across AWS and Microsoft Azure environments. The role contributes to security design, NIST-aligned reference architectures, and security capability development, while also supporting the design, implementation, and maintenance of Microsoft Purview and Microsoft Defender for Cloud Apps policies, including the integration and onboarding of cloud applications and SaaS services into the Defender for Cloud Apps security framework. The role is also responsible for the administration and security management of the Microsoft 365 environment, ensuring security controls, policies, and integrations are aligned with organizational security requirements. This role is part of the Cybersecurity Engineering career track, focusing on security technology implementation, architecture, and strategic security enforcement solutions, independent of the analyst track.

Security Policy Enforcement & Engineering

Lead security enforcement architecture efforts, drive enterprise security standardization, and develop scalable policy enforcement solutions that securely enable business operations while reduction organizational risk. Responsible for designing, implementing, and maintaining security policies and enforcement capabilities across on-premises and cloud environments, balancing security requirements with business and operational needs. After initial deployment, the Cybersecurity Engineer will develop and maintain standard operating procedures (SOPs) and support documentation for the solution. The engineer will also train members of the team on the solution's operation, support, and maintenance to ensure the team can effectively sustain and support the capability.

Technical Consulting & Business Support

Serve as a cybersecurity technical advisor to business, IT, cloud, infrastructure, application, and engineering teams, providing expert guidance to securely enable business initiatives and technology solutions. Consult with stakeholders to understand business and technical requirements, assess cybersecurity risks, and recommend practical security architectures, controls, technologies, and compensating measures. Provide cybersecurity expertise throughout the planning, design, acquisition, implementation, and operational lifecycle of new technologies, applications, cloud services, and business capabilities. Translate complex security risks and technical requirements into clear recommendations for both technical and non-technical stakeholders, balancing security, business objectives, operational requirements, and risk.

Security System Implementation & Optimization

Ensure enterprise security enforcement technologies are optimized for performance, reliability, and scalability. Lead the design and implementation of security enforcement technologies. Identify opportunities to automate security controls, policy enforcement, monitoring, and response to improve the effectiveness and scalability of the Cybersecurity Defense function.

Future Security Vision & Capability Development

Evaluate emerging cybersecurity threats, technologies, and industry trends to identify opportunities to strengthen the organization's security capabilities and reduce evolving risks. Develop and maintain a forward-looking cybersecurity technology roadmap aligned with business objectives, enterprise architecture, NIST frameworks, and the organization's overall security strategy. Identify gaps in existing security capabilities and controls and recommend solutions that improve security maturity, operational resilience, and risk reduction. Research, evaluate, and pilot emerging security technologies and capabilities, determining their applicability, business value, security benefits, and operational impact before enterprise adoption.

We recognize and appreciate the value and contributions of individuals with diverse backgrounds and experiences and welcome all qualified individuals to apply.

Job Qualifications:

• Typically requires a bachelor's or master's degree in computer science, information technology or related field and nine or more years of progressive experience in cybersecurity with a bachelor's or seven or more years with a master's. Equivalent professional experience may be substituted in lieu of education.

• Must demonstrate advanced knowledge of enterprise security monitoring, threat detection, incident response, detection engineering, SIEM platforms, endpoint security technologies, threat intelligence, threat hunting methodologies, penetration testing techniques, security automation, and cybersecurity best practices.

• Must have experience leading complex cybersecurity incidents, developing enterprise detection strategies, conducting threat hunting or penetration testing activities, implementing security technologies, and driving operational improvements across large and complex technology environments.

• Must have experience supporting or securing AI-enabled solutions and a working understanding of the security considerations associated with AI applications, models, data handling, service integrations, orchestration frameworks, and agentic workflows.

• Must possess the ability to evaluate emerging threats, influence enterprise cybersecurity strategy, and lead continuous improvement of threat detection, threat hunting, penetration testing, and incident response capabilities.

• Excellent analytical, verbal, and written communication skills are required, along with strong interpersonal skills to effectively interface with technical professionals, leadership, and cross-functional stakeholders.

• Must be customer focused and possess:

• The ability to lead enterprise cybersecurity monitoring and incident response across complex technology environments.

• The ability to analyze sophisticated threats, coordinate complex investigations, and direct effective incident response activities.

• The ability to design and implement advanced detection strategies, response automation, and operational improvements.

• The ability to conduct proactive threat hunting and penetration testing activities to identify control weaknesses and security gaps.

• The ability to develop enterprise standards, response procedures, playbooks, and technical documentation.

• The ability to evaluate and implement technologies that improve enterprise threat detection, testing, hunting, and incident response capabilities.

• The ability to mentor engineers and provide technical leadership across cross-functional cybersecurity teams.

• The ability to influence technical decisions and communicate cybersecurity risks and response strategies to technical and executive stakeholders.

• The ability to assess risks associated with AI-enabled capabilities and recommend practical mitigating controls.

• The ability to lead multiple strategic initiatives while balancing operational priorities and organizational objectives.

• Must have the ability to obtain and maintain a DoD Security clearance.

• The ability to work independently and in a team environment is essential, as is the ability to work extended hours and travel as required.

This position may transition to fully on-site as the business demand/requirements change.

Job Category:

Information Technology

Experience Level:

Senior (8+ years)

Workstyle:

Onsite

Full-Time/Part-Time:

Full-Time Salary

Pay Range Low:

118,500

Pay Range High:

207,750

Travel Percentage Required:

25% - 50%

Relocation Assistance Provided?:

Yes

US Citizenship Required?:

Yes

Clearance Required?:

Desired

Clearance Level:

Secret

General Atomics is committed to hiring and retaining a diverse workforce. We are an Equal Opportunity Employer and will consider all qualified applicants for employment without regard to race, color, religion, religious creed, ancestry, gender, pregnancy, sex, sexual orientation, transitioning status, gender identity, gender expression, national origin, age, genetic information, military and veteran status, marital status, medical condition, mental disability, physical disability, or any other basis protected by local, state, or federal law. In accordance with applicable federal law, General Atomics takes affirmative action to employ and advance the employment of qualified protected veterans and individuals with disabilities. We also prohibit compensation discrimination under all applicable laws. U.S. Citizenship is required for certain positions. To learn more, please review the EEOC’s "Know Your Rights: Workplace Discrimination is Illegal" poster.