{"id":1629133,"url":"https://alion.io/job/homeserve-senior-cybersecurity-architect","title":"Senior Cybersecurity Architect","company":{"id":1791719,"name":"HomeServe","domain":"homeserve.com","url":"https://alion.io/company/homeserve-com","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"UltiPro","truth_index":{"grade":"B","score":70,"open_postings":8,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":67,"computed_at":"2026-10-23T05:54:15Z"}},"role":"Security","role_family":"Security","seniority":"staff","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":143266,"max":191021,"currency":"USD","period":"year","gross":null,"usd_annual":191021},"salary_estimate":null,"experience_years_min":7,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"AI Agents","optional":false},{"name":"Akamai","optional":false},{"name":"Amazon S3","optional":false},{"name":"AWS","optional":false},{"name":"AWS Lambda","optional":false},{"name":"Azure","optional":false},{"name":"CI/CD","optional":false},{"name":"DLP","optional":false},{"name":"GCP","optional":false},{"name":"Human-in-the-Loop","optional":false},{"name":"IAM","optional":false},{"name":"ISO 27001","optional":false},{"name":"Kubernetes","optional":false},{"name":"Least Privilege","optional":false},{"name":"MuleSoft","optional":false},{"name":"NIST 800-53","optional":false},{"name":"NIST CSF","optional":false},{"name":"PCI DSS","optional":false},{"name":"Shift-Left Security","optional":false},{"name":"SIEM","optional":false},{"name":"Zero Trust","optional":false},{"name":"Apex","optional":true}],"status":"live","first_seen_at":"2026-09-30T14:22:41Z","employer_posted_date":"2026-10-05","last_verified_at":"2026-10-23T05:34:03Z","board_verified":true,"closed_at":null,"days_open":22,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":22},"description":"Position Overview:\nThis role serves HomeServe’s senior security architecture authority, responsible for designing, reviewing, and governing secure architecture for new and existing services, applications, and integrations before they reach production. The position creates business value by reducing the likelihood and blast radius of security incidents, accelerating secure delivery through reusable patterns and paved-road guardrails, and helping HomeServe meet customer, regulatory, and contractual obligations. Reporting to the VP of Information Security, this role leads formal security architecture reviews-producing risk-rated assessments and tracked remediation or exception plans-and acts as a design authority at key delivery gates (e.g., permission-to-build and permission-to-operate). It champions Zero Trust and secure-by-design principles across identity, network, application, and data security, and partners with Product, DevOps, Cloud, and Legal/Privacy to embed those practices into cohesive, scalable patterns adopted by delivery teams. The role owns and advances the security architecture roadmap and strategy-with particular focus on hybrid/multicloud (AWS primary), API/integration, and emerging AI-driven systems-and provides technical oversight and security architecture guidance for incident response while mentoring members of the information security team.\nResponsibilities:\nServe as the security architecture review and design authority for new solutions, integrations, and major changes-evaluate solution designs at permission-to-build and permission-to-operate gates, produce formal InfoSec assessments with risk-rated findings, and drive remediation or formal, time-boxed exceptions to closure.\nChampion and operationalize Zero Trust architecture: identity-centric access, least-privilege enforcement, micro segmentation, and continuous verification across on-premises, cloud, and containerized environments.\nDevelop enterprise security reference architectures, reusable design patterns, and secure-by-design standards and “paved-road” guardrails that delivery teams can adopt through self-service.\nDesign and review cloud security architecture across hybrid/multicloud (AWS primary): least-privilege IAM, serverless/Lambda hardening, S3/KMS encryption strategy (customer-managed vs. AWS-managed keys), Secrets Manager and key-rotation practices, VPC placement, and secure network egress.\nEmbed security into the SDLC and DevSecOps toolchain: CI/CD pipeline security, infrastructure-as-code scanning, container/Kubernetes security, and shift-left practices in partnership with Product and DevOps.\nAssess and guide the secure design of data and AI system data protection and classification, plus AI-specific controls such as human-in-the-loop and confidence-threshold gating, audit logging and rollback, and model/vendor data-handling and retention.\nReview API and integration security across platforms such as MuleSoft and Akamai (WAF, rate limiting, request validation) and third-party SaaS integrations.\nConduct third-party and vendor security risk assessments, including data-retention, consent, call-recording, and PII-handling obligations; partner with Legal/Privacy on regulatory determinations.\nMap controls and findings to recognized frameworks (NIST CSF 2.0, NIST 800-53, ISO 27001) and recommend and enforce minimum security baselines for IT platforms and technologies.\nEnforce Privileged Access Management (PAM) standards for service-account and credential handling across integrations and data pipelines.\nParticipate in and, where appropriate, act as an approver for the Architectural Review Board (ARB) and Change Advisory Board (CAB); manage pre-CAB security-related requests.\nPerform risk analysis for corporate functional and technical areas relevant to data security, including networks, applications, and 3rd-party service providers.\nCreate and maintain security architecture documentation, standards, patterns, and procedures.\nProvide technical oversight and security architecture guidance for incident identification, response, investigation, and remediation, including support during off hours as needed.\nResearch and maintain a knowledge base of information security and emerging-technology trends, advisories, and applicable laws and regulations; identify and communicate current and emerging security threats.\nCreate solutions that balance business requirements with information and cyber security requirements; influence peers, partners, and project teams toward security-minded decisions.\nEnable and coach delivery teams and information security staff to adopt secure design patterns and self-service guardrails; answer technical and procedural questions to improve processes.\nAll other duties as assigned.\nEssential Functions:\n\nEssential Job Function\n\n% of Time on Function\n\nSecurity architecture, design reviews & patterns\n\n40%\n\nRisk management, third-party & compliance\n\n20%\n\nCloud, DevSecOps & integration security\n\n20%\n\nSecurity strategy, governance & roadmap\n\n10%\n\nMentorship & security operations advisory\n\n10%\n\nTotal\n\n100%\n\nJob Requirements:\nBachelor’s degree in information technology, computer science, or a related field, or equivalent work or education-related experience.\n7+ years’ experience in IT Security, with demonstrated experience in security architecture and solution design review.\nDemonstrated experience designing Zero Trust and secure-by-design architectures, including reusable security patterns and reference architectures adopted across delivery teams.\nHands-on experience securing hybrid/multicloud environments (AWS strongly preferred; Azure/GCP a plus): IAM, serverless/Lambda, S3, KMS, Secrets Manager, VPC design, and cloud-native security controls.\nExperience integrating security into DevSecOps and the secure SDLC: CI/CD pipeline security, infrastructure-as-code scanning, and container/Kubernetes security.\nExperience with API and integration security (e.g., API gateways, WAF, MuleSoft/Akamai or equivalent) and securing third-party SaaS integrations.\nExposure to securing data and AI/ML or automation/agentic systems-data protection, autonomy controls, human-in-the-loop design, and model/vendor data-handling risk (increasingly required).\nExperience must include security standards development, risk assessment, third-party/vendor risk, and compliance testing; penetration-testing and vulnerability-assessment familiarity expected.\nProficient knowledge of information security standards, controls, and frameworks (e.g., NIST CSF 2.0, NIST 800-53, ISO 27001, PCI DSS) for desktops, servers, applications, databases, and network devices.\nWorking knowledge of key security technologies: cloud security services, IAM, cryptography/encryption and key management, DLP, SIEM, IDS/IPS, endpoint protection, firewalls, and Active Directory.\nStrong analytical and problem-solving skills; excellent verbal, written, and interpersonal communication skills; ability to interact with and influence all levels of the organization.\nEffective time-, project-, and organizational-management skills; ability to handle multiple projects within established time constraints.\nMust be able to work independently as well as in a team environment and maintain confidentiality.\nIndustry certifications preferred: CISSP required or strongly preferred; Microsoft SC-100 (Cybersecurity Architect Expert) and/or CISSP-ISSAP highly desirable for architecture depth; CCSP and AWS Certified Security - Specialty highly desirable for cloud depth; CISM, CISA, CEH, or GIAC a plus.\nMinimum Physical Requirements:\nThe physical demands described represent those that must be met by an employee to successfully perform the essential functions of this position. Reasonable accommodations may be made to enable individuals with disabilities to perform the functions of the position for which they work. While performing the duties of this position, the employee is regularly required to listen, talk and hear. The employee frequently is required to use hands or fingers, handle or feel objects, tools, or controls while executing tasks like working on a computer or talking on the telephone. The employee is occasionally required to stand; walk; sit; and reach with hands and arms. The employee must occasionally lift and/or move up to 15 pounds. Specific vision abilities required by this position include close vision, distance vision, and the ability to adjust focus. The noise level in the work environment is usually moderate to low.\nThis job description is intended to provide guidelines for job expectations and the employee's ability to perform the position described. It is not intended to be construed as an exhaustive list of all functions, responsibilities, skills, and abilities. Additional functions and requirements may be assigned by supervisors as deemed appropriate.\nCompensation\nThe salary range for this position varies based on the employee’s primary work location. Geographic compensation ranges are established based on local market conditions and may vary by location.\nMost U.S. locations: $143,266.23 - $191,021.64\nSelect geographic markets: $128,939.61 - $171,919.48\nExamples include Chattanooga, TN and other markets with similar compensation structures.\nPremium geographic markets: $157,592.85 - $210,123.80\nExamples include Norwalk, CT; New York City; San Francisco; and other markets with similar compensation structures.\nAnnual Bonus Eligibility: 15%\nHomeServe USA is an equal opportunity employer.\n#HUSA #LI-NM1 #LI-REMOTE","description_format":"text","description_chars":9510,"description_truncated":false,"requirements":{"experience_years_min":7,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":true},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security","Property & Casualty Insurance","Facilities Management"],"lifecycle":[{"event":"open","at":"2026-10-01T21:16:43Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 3","filings_12m":3,"filings_prev_12m":0,"green_card_filings_12m":0,"median_offered_wage_usd":127500,"route":null,"cap_exempt":false,"checked_at":"2026-10-15T11:24:14+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)"],"filings_for_role_12m":0}],"liveness":{"score":89,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.888,"p_room":1,"age_days":22,"expected_fill_days":67,"reasons":["conf:0","velocity","win:early"],"computed_at":"2026-10-23T05:54:15Z"},"pay":{"stated_usd_annual":191021,"is_top_pay":false},"html_url":"https://alion.io/job/homeserve-senior-cybersecurity-architect","json_url":"https://alion.io/job/homeserve-senior-cybersecurity-architect.json","meta":{"generated_at":"2026-10-23T08:19:20Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":13261,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-24T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1791719},"rest":"https://alion.io/mcp/rest/get_company?id=1791719"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fhomeserve-senior-cybersecurity-architect"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fhomeserve-senior-cybersecurity-architect"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fhomeserve-senior-cybersecurity-architect"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/homeserve-senior-cybersecurity-architect\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fhomeserve-senior-cybersecurity-architect"}]}