Senior Solutions Architect | Vulnerability/Exposure Management (Remote)

The Senior Solutions Architect, Security Operations will be responsible for providing architect-level thought leadership and expertise across modern vulnerability and exposure management, including risk-based vulnerability management, Continuous Threat Exposure Management (CTEM), attack surface management, threat-informed prioritization, attack path analysis, and remediation operationalization. The role will focus on helping organizations evolve from traditional vulnerability scanning and reporting toward continuous, risk-driven exposure management programs. This is a client-facing, presales role that will also collaborate across the broader Security Operations practice, supporting adjacent capabilities including SOC modernization, SIEM/XDR, threat detection and response, and AI-enabled security operations.

Responsibilities

Lead complex client engagements as senior architect for vulnerability management modernization, CTEM program development, exposure management architecture, and risk-based remediation strategies; Assess client vulnerability and exposure management capabilities and deliver strategic, tactical, and operational recommendations; Design target-state vulnerability and exposure management architectures; Develop and operationalize CTEM programs; Define risk-based vulnerability prioritization methodologies; Architect vulnerability and exposure management operating models; Design automation and orchestration workflows; Evaluate and incorporate AI-assisted capabilities into vulnerability and exposure management; Incorporate threat-informed validation techniques; Collaborate with SOC/SIEM architects to integrate exposure intelligence with detection and response platforms; Develop reusable reference architectures, assessment methodologies, solution briefs, packaged offerings, and delivery playbooks; Collaborate with Security Solutions practices, Regional teams, Managed Services, and Service Delivery; Serve as senior technical counterpart to strategic security technology partners; Support account teams on qualified opportunities through technical discovery, solution architecture, proposal development, SOW creation, and effort estimation; Develop and deliver technical enablement and workshops, and mentor junior architects; Maintain working knowledge of adjacent Security Operations domains; Represent Trace3 through customer executive briefings, partner engagements, industry events, and technical presentations

Requirements

Bachelor's degree in Computer Science, Cybersecurity, Information Security, Engineering, or a related discipline, or equivalent measurable knowledge and experience; 8+ years of experience in cybersecurity with hands-on experience designing, implementing, operating, or modernizing enterprise vulnerability management or exposure management programs; Experience in a customer-facing presales, solutions architecture, or technology consulting role within a VAR, systems integrator, consultancy, or technology vendor; Deep technical expertise in enterprise vulnerability management, risk-based vulnerability prioritization, CTEM principles, exposure assessment, and remediation lifecycle management; Demonstrated experience with leading vulnerability and exposure management technologies such as Tenable, Qualys, Rapid7, CrowdStrike Falcon Exposure Management, Wiz, Axonius, XM Cyber, or comparable platforms; Ability to design target-state vulnerability and exposure management architectures; Experience developing or operating enterprise vulnerability management programs, including asset discovery, prioritization, remediation tracking, exception management, and executive reporting; Strong working knowledge of CVSS, EPSS, CISA KEV, and SSVC; Familiarity with EASM, CAASM, attack path analysis, breach and attack simulation, and adversarial validation; Experience integrating vulnerability and exposure management platforms with CMDB, ITSM, SOAR, cloud security platforms, and security analytics solutions; Working knowledge of AWS, Azure, and GCP, including cloud workload security, container security, and cloud vulnerability and exposure management; Practical understanding of automation, orchestration, and AI-assisted security capabilities; Working knowledge of SIEM/SOAR, EDR/XDR, threat detection and response, and SOC operations; Working knowledge of NIST CSF, NIST SP 800-40, CIS Controls, MITRE ATT&CK, ISO 27001, and CTEM-aligned frameworks; Ability to conduct technical workshops, security assessments, architectural reviews, and executive briefings; Knowledge of creating technical documentation, proposals, SOWs, and strategic roadmaps; Strong executive communication, interpersonal, and customer presentation skills; Ability to travel when needed (approximately 25–35%) and holds a valid driver's license

Nice to have

Certifications such as CISSP, CCSP, GIAC, or relevant cloud security and vendor architecture certifications; Prior experience developing packaged service offerings, reference architectures, assessment methodologies, technical playbooks, or certification and enablement programs; Experience with integration of vulnerability intelligence with CrowdStrike, Palo Alto Networks Cortex XSIAM, Microsoft Sentinel, Splunk, or Google SecOps

Benefits

Comprehensive medical, dental and vision plans for you and your dependents; 401(k) Retirement Plan with Employer Match; 529 College Savings Plan; Health Savings Account; Life Insurance; Long-Term Disability; Competitive Compensation; Training and development programs; Major offices stocked with snacks and beverages; Collaborative and cool culture; Work-life balance and generous paid time off; Possible variable incentive compensation such as bonuses or commissions