Come and join us on this incredible journey, We need you! We want to find a highly motivated, innovative, and experienced Lead Security Architect keen to join our fast-paced Business Cyber Security team in Northborough, MA! (Candidates may also reside in either, Connecticut, New York, New Jersey, New Hampshire, Pennsylvania, Rhode Island, Vermont, or Maine).
If you yearn to be innovative and contribute new ideas and play a critical part in the US Security Organization, we want to hear from you! What you'll do As a Lead Security Architect, you'll serve as a security lead and an expert in many areas of security, describing in business terms the impact of security policies, standards, and
architecture on the business. You'll provide security direction to programs and projects based on business requirements and focus areas. You'll interpret high level business requirements and communicate them to highly technical security engineers; conversely, you should also be able to articulate highly technical issues to a non-technical business audience.
You'll provide security design and requirements guidance, and ensure that the delivered solution is fit for purpose and effective when transitioned into service. You'll identify security services to be integrated into the overall solution and work with the security domain engineering teams to ensure the implementation of the services.
Key responsibilities include the following: Drive security requirements, architectures, patterns, and approaches within the product operating model ensuring solutions are secure by design Provide day to day engagement with development teams to advise and consult on security matters Work closely with project teams, architects, and Dev Ops teams to provide technical security input to solution designs and ensure they comply with regulatory standards Remove impediments for the successful integration of security services Interface with non-technical business stakeholders to communicate and prioritize security risks Ensurethat key risks and issues are identified, addressed, and resolved in a manner that satisfies the business risk appetite.
Ensure residual risk is captured with remediation plans and owners are identified and accept the risks. What you'll need Security Technology & Services o Strong knowledge of all IT/OT domains such as Network, Endpoint, Cloud IAAS, PAAS & SAAS (Prefer Azure and M365), IAM, Active Directory, etco Hands-on experience with IT security solutions and controlso Familiarity with integrating security tooling and approach into other cloud and on-prem solutionso Strong background in defining security requirements across network, database, operating system, and application domains.
o Good understanding of security testing processes: SAST (Static Application Security Testing), DAST (Dynamic Application Security Testing), Vulnerability backssments, Dev Sec Ops pipeline, Pen testing, etc. o Strong knowledge of security solutions such as IDS/IPS, secure remote access, firewalls, encryption, secure protocols, data protection, data loss prevention and identity management solutions, etco Strong knowledge of data and information flows, governance, and network protocols. o Knowledge of security hardening techniques and policy development, particularly operating system hardening (e.
g. Windows, Mac, Linux UNIX, Oracle). o Experience in integration with a Security Orchestration, Automation & Response (SOAR) solution, or working within a system monitoring environment. o Knowledge in various scripting and programming languages (Python, Power Shell etc. ) a pluso Experience designing secure networks, systems, and resilient application architectures Project Engagement o Experience in defining and designing large scale projects strategy and solutionso Experience incorporating security controls at each stage of the software development lifecycle.
o Experience of designing and managing security controls within service providers and the cloud. o Experience with Agile projects and a Product Operating Model approach. o Familiar with contract management, ensuring security controls are referenced in agreements. o Ability to meet deadlines, time constraints and periodic requirements Collaborative Working o Effective communication (written and verbal), leadership and partnering skills. o Ability to demonstrate a high degree of credibility and influence senior stakeholders within the organization. o Prepared to challenge the program and IT colleagues and have the " difficult conversations" where needed in the interests of National Grido Ability to operate as a highly independent worker and as part of a strong team, taking a collaborative approach.
It would be awesome if you had In-depth network security and M365 security knowledge Educated to degree level (or equivalent combination of education and experience). Security Qualifications such as Azure Security, M365 security, CISSP/CCSP/ etc. Information Security Certifications/Qualifications such as CISSP and MSc Information Security What you'll get Consistent growth potential through company leadership programs Competitive compensation package including robust benefits with a yearly bonus Numerous wellness programs A multitude of company-endorsed community programs to participate in More Information Are you the right fit for this exciting role?
You want to learn more about the position and National Grid's ambitious Digital Transformation? Then let's chat! Our organization follows a hybrid work structure in our service territory (NY & MA and adjacent states) where employees can work remotely or from the office, as needed. Working from the office is encouraged when working on tasks that require a high degree of collaboration.
We work with our employees to foster a work schedule that fits your flexible schedule. #LI-CL1 #LI-HYBRID At National Grid , we keep the lights on and homes warm. But it's so much more than that. We keep people connected and society moving. This is no easy feat, and it takes all of us. But National Grid supplies us with the environment to make it happen. As we generate momentum in the energy transition for all, we don't plan on leaving any of our customers in the dark. But we aren't looking for external recognition - we already what we do is vital.
We're building a clean, fair and affordable energy future. Salary$124,000 - $146,000 a year Please be advised that due to the nature of this position, incumbents are subject to federal Drug & Alcohol safety regulations governing US Department of Transportation (" DOT" ) covered positions, including the Federal Motor Carrier Safety Administration (FMCSA) and Pipeline Hazardous Material Safety Administration (PHMSA). As such, the Company's testing programs and policies regarding the use of federally prohibited drugs or alcohol, for recreational or medical purposes, will remain in effect for these safety-sensitive, DOT covered positions.
This position has a career path which provides for advancement opportunities within and across bands as you develop and evolve in the position; gaining experience, expertise and acquiring and applying technical skills. Candidates will be backssed and provided offers against the minimum qualifications of this role and their individual experience. National Grid is an equal opportunity employer that values a broad diversity of talent, knowledge, experience and expertise. We foster a culture of inclusion that drives employee engagement to deliver superior performance to the communities we serve.
National Grid is proud to be an affirmative action employer. We encourage minorities, women, individuals with disabilities and protected veterans to join the National Grid team. PDN-9ad928ae-6893-4187-b046-06c5f1282d3d
