Trace3 - Senior Solutions Architect | Vulnerability/Exposure Management (Remote)

• Bachelor's degree in Computer Science, Cybersecurity, Information Security, Engineering, or a related discipline from an accredited college or university, or equivalent measurable knowledge and experience gained through industry, military, defense, or government operations. • 8+ years of experience in cybersecurity, with significant hands-on experience designing, implementing, operating, or modernizing enterprise vulnerability management or exposure management programs beyond product implementation alone. • Experience in a customer-facing presales, solutions architecture, or technology consulting role within a VAR, systems integrator, consultancy, or technology vendor. • Deep technical expertise in enterprise vulnerability management, risk-based vulnerability prioritization, CTEM principles, exposure assessment, and remediation lifecycle management. • Demonstrated experience with leading vulnerability and exposure management technologies, such as Tenable, Qualys, Rapid7, CrowdStrike Falcon Exposure Management, Wiz, Axonius, XM Cyber, or comparable enterprise platforms. Deep expertise in at least one major platform and working familiarity with others is preferred. • Demonstrated ability to design target-state vulnerability and exposure management architectures, including platform consolidation, technology integration, program modernization, and scalable operating models. • Experience developing or operating enterprise vulnerability management programs, including asset discovery, inventory and ownership, vulnerability identification, findings normalization, risk prioritization, remediation tracking, exception management, and executive-level reporting. • Strong working knowledge of vulnerability scoring and prioritization methodologies, including CVSS, EPSS, CISA KEV, and SSVC, with the ability to incorporate threat intelligence, exploitability, and business context into defensible remediation decisions. • Familiarity with external attack surface management (EASM), cyber asset attack surface management (CAASM), attack path analysis, breach and attack simulation, and adversarial validation techniques. • Experience integrating vulnerability and exposure management platforms with enterprise systems such as CMDB, ITSM, SOAR, cloud security platforms, and security analytics solutions to enable scalable remediation workflows and operational reporting. • Working knowledge and experience with major cloud service providers (AWS, Azure, GCP), including cloud workload security, container security, native security tooling, and cloud vulnerability and exposure management considerations. • Practical understanding of automation, orchestration, and AI-assisted security capabilities, including their application to vulnerability prioritization, remediation workflows, threat intelligence enrichment, and exposure reporting. • Working knowledge of adjacent Security Operations technologies and concepts, including SIEM/SOAR, EDR/XDR, threat detection and response, and SOC operations, with the ability to collaborate on cross-domain architecture and provide secondary technical support. • Understanding of how vulnerability and exposure intelligence integrates with platforms such as CrowdStrike, Palo Alto Networks Cortex XSIAM, Microsoft Sentinel, Splunk, or Google SecOps to improve threat detection and security operations effectiveness. • Working knowledge of cybersecurity principles, frameworks, and standards, including NIST CSF, NIST SP 800-40, CIS Controls, MITRE ATT&CK, ISO 27001, and CTEM-aligned exposure management frameworks. • Certifications such as CISSP, CCSP, GIAC, or relevant cloud security and vendor architecture certifications are highly preferred. • Prior experience developing packaged service offerings, reference architectures, assessment methodologies, technical playbooks, or certification and enablement programs is highly preferred. • Ability to conduct technical workshops, security assessments, architectural reviews, and executive briefings, translating complex technical findings into actionable recommendations and business outcomes. • Knowledge and experience creating and maintaining technical documentation, presentations, architectural designs, implementation plans, proposals, SOWs, and strategic roadmaps. • Strong executive communication skills, including the ability to articulate complex cybersecurity risks, justify technology investments, and defend architectural recommendations to technical and business stakeholders. • Strong interpersonal, communication, collaboration, and customer presentation skills. • Motivated self-starter with strong problem-solving abilities and the confidence to work directly with customers on complex security challenges. • Highly organized, detail-oriented, with excellent time management skills and the ability to prioritize effectively in a fast-paced, evolving environment. • Comfortable managing multiple and changing priorities while meeting deadlines in an entrepreneurial environment. • Ability to travel when needed (approximately 25–35%); holds a valid driver’s license. • Actual salary will be based on a variety of factors, including location, experience, skill set, performance, licensure and certification, and business needs. The range for this position in other geographic locations may differ. Certain positions may also be eligible for variable incentive compensation, such as bonuses or commissions, that is not included in the base salary.