{"id":3179416,"url":"https://alion.io/job/trace3-senior-solutions-architect-vulnerabilityexposure-management-remote","title":"Senior Solutions Architect | Vulnerability/Exposure Management (Remote)","company":{"id":1703,"name":"Trace3","domain":"trace3.com","url":"https://alion.io/company/trace3","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"B","score":83,"open_postings":10,"ghost_share":0,"stale_share":0.7,"repost_share":0,"time_to_fill_p50_days":39,"computed_at":"2026-10-31T05:58:55Z"}},"role":"Solutions","role_family":"Solutions","seniority":"staff","employment_type":null,"work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Dallas, United States"],"countries":["US"],"hiring_countries":["US"],"hiring_countries_total":1,"salary":{"min":175000,"max":200000,"currency":"USD","period":"year","gross":null,"usd_annual":200000},"salary_estimate":null,"experience_years_min":8,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Cortex","optional":false},{"name":"Crowdstrike","optional":false},{"name":"CVSS","optional":false},{"name":"EPSS","optional":false},{"name":"GCP","optional":false},{"name":"Google SecOps","optional":false},{"name":"ISO 27001","optional":false},{"name":"ITSM","optional":false},{"name":"KEV","optional":false},{"name":"Microsoft Sentinel","optional":false},{"name":"NIST CSF","optional":false},{"name":"Qualys Cloud Platform","optional":false},{"name":"SIEM","optional":false},{"name":"Splunk","optional":false},{"name":"Wiz","optional":false},{"name":"Prometheus","optional":true}],"status":"live","first_seen_at":"2026-10-23T18:08:45Z","employer_posted_date":"2026-10-23","last_verified_at":"2026-10-31T06:13:34Z","board_verified":true,"closed_at":null,"days_open":7,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":7},"description":"Who is Trace3?\nTrace3 is a leading Transformative IT Authority, providing unique technology solutions and consulting services to our clients. Equipped with elite engineering and dynamic innovation, we empower IT executives and their organizations to achieve competitive advantage through a process of Integrate, Automate, Innovate.\nOur culture at Trace3 embodies the spirit of a startup with the advantage of a scalable business. Employees can grow their career and have fun while doing it!\nTrace3 is headquartered in Irvine, California. We employ more than 1,200 people all over the United States. Our major field office locations include Denver, Indianapolis, Grand Rapids, Lexington, Los Angeles, Louisville, Texas, San Francisco. \nReady to discover the possibilities that live in technology?\nCome Join Us!\nStreet-Smart - Thriving in Dynamic Times\nWe are flexible and resilient in a fast-changing environment. We continuously innovate and drive constructive change while keeping a focus on the “big picture.” We exercise sound business judgment in making high-quality decisions in a timely and cost-effective manner. We are highly creative and can dig deep within ourselves to find positive solutions to different problems.\nJuice - The “Stuff” it takes to be a Needle Mover \nWe get things done and drive results. We lead without a title, empowering others through a can-do attitude. We look forward to the goal, mentally mapping out every checkpoint on the pathway to success, and visualizing what the final destination looks and feels like.\nTeamwork - Humble, Hungry and Smart\nWe are humble individuals who understand how our job impacts the company's mission. We treat others with respect, admit mistakes, give credit where it’s due and demonstrate transparency. We “bring the weather” by exhibiting positive leadership and solution-focused thinking. We hug people in their trials, struggles, and failures - not just their success. We appreciate the individuality of the people around us.\nJOB SUMMARY:\nThe Senior Solutions Architect, Security Operations will be responsible for providing architect-level thought leadership and expertise across modern vulnerability and exposure management, including risk-based vulnerability management, Continuous Threat Exposure Management (CTEM), attack surface management, threat-informed prioritization, attack path analysis, and remediation operationalization. The role will focus on helping organizations evolve from traditional vulnerability scanning and reporting toward continuous, risk-driven exposure management programs that integrate people, processes, and technology to measurably reduce cyber risk.\nUnder the direction of Security Operations leadership, the Senior Solutions Architect will lead Trace3's most complex client architecture engagements across these domains and translate that work into reference architectures, repeatable offerings, and enablement that allow Trace3's regional technical teams to sell and deliver Security Operations solutions consistently and at scale.\nThis is a client-facing, presales role that will also collaborate across the broader Security Operations practice, supporting adjacent capabilities including SOC modernization, SIEM/XDR, threat detection and response, and AI-enabled security operations.\nSUMMARY OF ESSENTIAL JOB FUNCTIONS:\nLead complex client engagements as the senior architect for vulnerability management modernization, CTEM program development, exposure management architecture, and risk-based remediation strategies, from initial discovery and assessment through solution design and executive readout.\nAssess client vulnerability and exposure management capabilities, technologies, processes, and operational maturity, delivering strategic, tactical, and operational recommendations aligned to business risk, security objectives, and measurable outcomes.\nDesign target-state vulnerability and exposure management architectures that integrate vulnerability scanning, external and internal attack surface management (EASM/CAASM), cloud and container security, identity exposure, and attack path analysis to provide a comprehensive and prioritized view of organizational risk.\nDevelop and operationalize CTEM programs that establish continuous processes for exposure discovery, prioritization, validation, and remediation, supported by clear governance, accountability, and continuous improvement.\nDefine risk-based vulnerability prioritization methodologies incorporating CVSS, EPSS, CISA KEV, threat intelligence, asset criticality, exploitability, compensating controls, and business context to focus remediation efforts on the exposures that present the greatest organizational risk.\nArchitect vulnerability and exposure management operating models, including asset ownership, remediation workflows, service-level agreements (SLAs), exception management, risk acceptance, executive reporting, and integration with IT, infrastructure, cloud, and application teams.\nDesign automation and orchestration workflows that improve vulnerability management efficiency, including findings normalization, enrichment, remediation ticketing, workflow integration, and closed-loop remediation validation.\nEvaluate and incorporate AI-assisted and agentic capabilities into vulnerability and exposure management, including intelligent prioritization, findings correlation, automated remediation recommendations, and reporting, while establishing appropriate governance and human oversight.\nIncorporate threat-informed validation techniques, including attack path analysis, breach and attack simulation, penetration testing, and purple-team findings, to validate exposure severity, inform remediation priorities, and measure security posture improvements.\nCollaborate with SOC/SIEM architects to integrate vulnerability and exposure intelligence with detection and response platforms, ensuring exposure context informs threat detection, incident prioritization, and security operations decision-making.\nDevelop and maintain reusable reference architectures, assessment methodologies, solution briefs, packaged offerings, and delivery playbooks for vulnerability and exposure management, while contributing to broader Security Operations practice development.\nCollaborate with Security Solutions practices, Regional teams, Managed Services, and Service Delivery to scope, design, and transition engagements that can be delivered consistently and effectively.\nServe as a senior technical counterpart to strategic security technology partners, including vulnerability management, exposure management, cloud security, and security operations vendors, supporting joint solution development, technical enablement, and go-to-market initiatives.\nSupport account teams on qualified opportunities through technical discovery, solution architecture, competitive positioning, proposal development, SOW creation, effort estimation, and technical validation.\nDevelop and deliver technical enablement, workshops, and knowledge-sharing sessions for regional architects, sellers, and delivery teams, while mentoring junior architects and early-career practitioners.\nMaintain working knowledge of adjacent Security Operations domains, including SIEM/SOAR, EDR/XDR, SOC modernization, threat intelligence, and AI-enabled security operations, providing secondary architectural and presales support as needed.\nRepresent Trace3 through customer executive briefings, partner engagements, industry events, thought leadership, and technical presentations.\n\nREQUIRED SKILLS AND EXPERIENCE:\nBachelor's degree in Computer Science, Cybersecurity, Information Security, Engineering, or a related discipline from an accredited college or university, or equivalent measurable knowledge and experience gained through industry, military, defense, or government operations.\n8+ years of experience in cybersecurity, with significant hands-on experience designing, implementing, operating, or modernizing enterprise vulnerability management or exposure management programs beyond product implementation alone.\nExperience in a customer-facing presales, solutions architecture, or technology consulting role within a VAR, systems integrator, consultancy, or technology vendor.\nDeep technical expertise in enterprise vulnerability management, risk-based vulnerability prioritization, CTEM principles, exposure assessment, and remediation lifecycle management.\nDemonstrated experience with leading vulnerability and exposure management technologies, such as Tenable, Qualys, Rapid7, CrowdStrike Falcon Exposure Management, Wiz, Axonius, XM Cyber, or comparable enterprise platforms. Deep expertise in at least one major platform and working familiarity with others is preferred.\nDemonstrated ability to design target-state vulnerability and exposure management architectures, including platform consolidation, technology integration, program modernization, and scalable operating models.\nExperience developing or operating enterprise vulnerability management programs, including asset discovery, inventory and ownership, vulnerability identification, findings normalization, risk prioritization, remediation tracking, exception management, and executive-level reporting.\nStrong working knowledge of vulnerability scoring and prioritization methodologies, including CVSS, EPSS, CISA KEV, and SSVC, with the ability to incorporate threat intelligence, exploitability, and business context into defensible remediation decisions.\nFamiliarity with external attack surface management (EASM), cyber asset attack surface management (CAASM), attack path analysis, breach and attack simulation, and adversarial validation techniques.\nExperience integrating vulnerability and exposure management platforms with enterprise systems such as CMDB, ITSM, SOAR, cloud security platforms, and security analytics solutions to enable scalable remediation workflows and operational reporting.\nWorking knowledge and experience with major cloud service providers (AWS, Azure, GCP), including cloud workload security, container security, native security tooling, and cloud vulnerability and exposure management considerations.\nPractical understanding of automation, orchestration, and AI-assisted security capabilities, including their application to vulnerability prioritization, remediation workflows, threat intelligence enrichment, and exposure reporting.\nWorking knowledge of adjacent Security Operations technologies and concepts, including SIEM/SOAR, EDR/XDR, threat detection and response, and SOC operations, with the ability to collaborate on cross-domain architecture and provide secondary technical support.\nUnderstanding of how vulnerability and exposure intelligence integrates with platforms such as CrowdStrike, Palo Alto Networks Cortex XSIAM, Microsoft Sentinel, Splunk, or Google SecOps to improve threat detection and security operations effectiveness.\nWorking knowledge of cybersecurity principles, frameworks, and standards, including NIST CSF, NIST SP 800-40, CIS Controls, MITRE ATT&CK, ISO 27001, and CTEM-aligned exposure management frameworks.\nCertifications such as CISSP, CCSP, GIAC, or relevant cloud security and vendor architecture certifications are highly preferred.\nPrior experience developing packaged service offerings, reference architectures, assessment methodologies, technical playbooks, or certification and enablement programs is highly preferred.\nAbility to conduct technical workshops, security assessments, architectural reviews, and executive briefings, translating complex technical findings into actionable recommendations and business outcomes.\nKnowledge and experience creating and maintaining technical documentation, presentations, architectural designs, implementation plans, proposals, SOWs, and strategic roadmaps.\nStrong executive communication skills, including the ability to articulate complex cybersecurity risks, justify technology investments, and defend architectural recommendations to technical and busines...","description_format":"text","description_chars":15081,"description_truncated":true,"requirements":{"experience_years_min":8,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Life insurance","Retirement plans"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Security Operations","IT Consulting & Digital Transformation","AI Consulting & Integration","Cloud Consulting & Migration"],"lifecycle":[{"event":"open","at":"2026-10-23T20:52:09Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"Filed H-1B visas in the last two years","filings_12m":0,"filings_prev_12m":3,"green_card_filings_12m":0,"median_offered_wage_usd":null,"route":null,"cap_exempt":false,"checked_at":"2026-10-29T16:27:21+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)"],"filings_for_role_12m":0}],"liveness":{"score":63,"band":"ok","label":"Likely open","p_open":1,"p_active":0.627,"p_room":1,"age_days":7,"expected_fill_days":39,"reasons":["conf:3","stale_co","velocity","win:early"],"computed_at":"2026-10-31T05:58:55Z"},"pay":{"stated_usd_annual":200000,"is_top_pay":true},"html_url":"https://alion.io/job/trace3-senior-solutions-architect-vulnerabilityexposure-management-remote","json_url":"https://alion.io/job/trace3-senior-solutions-architect-vulnerabilityexposure-management-remote.json","meta":{"generated_at":"2026-10-31T07:59:01Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":11890,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-01T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1703},"rest":"https://alion.io/mcp/rest/get_company?id=1703"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Ftrace3-senior-solutions-architect-vulnerabilityexposure-management-remote"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Ftrace3-senior-solutions-architect-vulnerabilityexposure-management-remote"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Ftrace3-senior-solutions-architect-vulnerabilityexposure-management-remote"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/trace3-senior-solutions-architect-vulnerabilityexposure-management-remote\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Ftrace3-senior-solutions-architect-vulnerabilityexposure-management-remote"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3179416}},{"tool":"search_jobs","arguments":{"company":"trace3.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3179416},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}