Sr Advanced Cyber Security Architect/Engineer

About this role

Solstice is seeking a highly skilled and experienced Sr Adv Cyber Security Architect to build, lead, and continuously evolve its penetration testing program. This is a senior, hands-on leadership role in which the successful candidate will serve as the primary point of contact for penetration testing activities across the organization.

The role is responsible for designing a comprehensive penetration testing program, directly contributing to technical assessments, and mentoring a growing team of security professionals.

Key Responsibilities

Technical Responsibilities

Design, execute, and lead end-to-end penetration tests across a wide range of environments, including web applications, APIs, cloud infrastructure, internal and external networks, and mobile applications.

Conduct penetration testing across software-as-a-service and platform-as-a service environments, identifying unique risks and attack surfaces specific to cloud hosted and multi-tenant platforms. Perform AI and machine learning application security assessments, including testing of large language model applications for vulnerabilities such as prompt injection, model inversion attacks, data poisoning, insecure output handling, and training data leakage.

Simulate real-world adversarial attack scenarios using threat intelligence and red team methodologies.

Conduct vulnerability assessments, threat modeling, and risk analysis across diverse technology stacks.

Develop and maintain custom exploits, scripts, and tooling to support advanced testing scenarios.

Perform social engineering, phishing simulations, and physical security assessments as required.

Program Development and Leadership

Architect and build a comprehensive, scalable penetration testing program aligned with recognized industry frameworks, including OWASP, PTES, NIST, and MITRE ATT&CK.

Define penetration testing standards, methodologies, playbooks, and reporting templates.

Establish key performance indicators and metrics ...