Job Description:

Key Responsibilities

Security Architecture & Solution Leadership

• Lead cybersecurity architecture initiatives, ensuring solutions meet business, regulatory, and risk management objectives.

• Design end-to-end security architectures across identity, endpoint, network, application, data, and cloud security domains.

• Collaborate with enterprise, cloud, workplace, and application architects to deliver integrated and defense-in-depth solutions.

• Define, maintain, and enforce security architecture standards, patterns, and reference models aligned with Zero Trust principles.

Core Cyber Security Domains

• Architect solutions across the following areas:

  Identity & Access Management (IAM) – Entra ID / Azure AD, MFA, PAM, Zero Trust access

  Endpoint & Workplace Security – EDR/XDR, device compliance, conditional access

  Network Security – Firewalls, SASE, ZTNA, segmentation

  Cloud & Application Security – CNAPP, CSPM, CWPP, DevSecOps integration

  Data Protection & Compliance – DLP, encryption, data classification, privacy controls

• Design and integrate SOC and Security Operations capabilities including:

  SIEM, SOAR, threat intelligence, incident response workflows

  Automation and AI-driven security operations

Governance, Risk & Compliance

• Translate business and regulatory requirements (ISO 27001, NIST, CIS, SOC2, GDPR, LGPD) into actionable security architectures.

• Support security risk assessments, threat modeling, and architecture reviews.

• Ensure security-by-design across programs and delivery initiatives.

Advisory, Evaluation & Innovation

• Evaluate and recommend security technologies and platforms that improve risk posture and operational efficiency.

• Support RFPs, proposals, and client engagements with clear security value propositions and solution narratives.

• Stay current on emerging threats, attack vectors, and security technologies (AI security, post-quantum, supply chain risk).

Stakeholder & Delivery Engagement

• Communicate effectively with executives, security leaders, technical teams, and non-technical stakeholders.

• Provide architectural oversight during implementation, ensuring solutions are delivered as designed.

• Report on architecture progress, risks, and mitigation strategies.

Basic Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, Engineering, or equivalent experience
• 7+ years in technology roles, including 3+ years in Cybersecurity or Solution Architecture
• Experience designing enterprise-scale security solutions across multiple security domains
• Strong experience securing cloud and hybrid environments
• Proven ability to lead cross-functional security and technology teams
• Strong analytical, risk-based decision-making, and problem-solving skills
• Ability to translate complex security concepts into clear business language
• Continuous learner with strong awareness of evolving threats and technologies

Required Technical Expertise

• Identity & Access Management (IAM, PAM, Zero Trust)

• Cloud security (Azure, AWS, or multi-cloud environments)

• Endpoint security (EDR/XDR)

• SIEM / SOAR and SOC integration

• Network and perimeter security architectures

• Security governance, risk, and compliance frameworks

Preferred / Other Qualifications

• Advanced degree in Cyber Security, Information Security, or related field

• Relevant certifications, such as:

  CISSP, CISM, or CCSP

  Microsoft Security Architect Expert

  AWS or Azure Security certifications

  TOGAF (with security focus)

• Experience supporting large-scale security transformations and regulated industries

At DXC Technology, we believe strong connections and community are key to our success. Our work model prioritizes in-person collaboration while offering flexibility to support wellbeing, productivity, individual work styles, and life circumstances. We’re committed to fostering an inclusive environment where everyone can thrive.

Recruitment fraud is a scheme in which fictitious job opportunities are offered to job seekers typically through online services, such as false websites, or through unsolicited emails claiming to be from the company. These emails may request recipients to provide personal information or to make payments as part of their illegitimate recruiting process. DXC does not make offers of employment via social media networks and DXC never asks for any money or payments from applicants at any point in the recruitment process, nor ask a job seeker to purchase IT or other equipment on our behalf. More information on employment scams is available here.