Lead Security Architect

This role is for someone who is looking to positively impact Rapid7 with their information security knowledge by contributing to Security Trust & Governance operations. An information security and/or information technology background would set you up for success in this position. Your ability to successfully carry out cross-functional work will require strong communication skills, patience, and a solution-oriented attitude.

You'll join us in our new Prague (Czech Republic) office and work with an energized team that cares deeply about the success of these initiatives, and leadership that values work-life balance, an inclusive culture, and your ongoing career development.

About the Team

Rapid7's Trust & Security Governance team functions within the Information Security department and plays a crucial role in supporting the organization's mission. We ensure we meet our duty of care to our customers, employees, and shareholders by creating effective governance for upholding internal security policies, identifying and managing security risk, distributing foundational security expertise across every department to create an exceptional security culture, and bolstering customer and community trust by providing accessible and transparent information about our internal security program. This role partners closely with other InfoSec teams, Legal, Procurement, and many other teams at Rapid7.

• Evaluate security risks in new and existing products and processes.
• Provide recommendations and influence Rapid7 stakeholders to implement the right level of security.
• Address questions about Rapid7's internal security program from customers, prospects, and auditors. This will often require working with other members of the Information Security team, and with other Rapid7 teams, including Engineering, Product Management, Content Strategy, and Legal.
• Work in different initiatives simultaneously managing expectations with all stakeholders.
• Assist in evaluating new technologies for internal and platform use
• Assist lead members of the security team with tasks related to:
  
  
  • Provide Security Architect input to other projects and initiatives
  • Identify risks while evaluating the design and operational effectiveness of controls to report opportunities for improvement
  • Define and product metrics for Management consumption
  • Aiding in security awareness and culture initiatives throughout the company
  • Develop security guidance for different stakeholders
  • Workflow/process improvements

• 6+ years of experience in information security, information technology, or an adjacent field.
• Ability to apply a threat modelling perspective when evaluating complex systems to identify risks and recommendations.
• identify service/product integrations risks and advice and influence business owners to make a secure use of third party products.
• Strong project management abilities, including ability to coordinate initiatives across technical and non-technical teams/stakeholders and managing distributed teams and projects.
• Experience collaborating closely with security partners, including incident response, red teams, architects, and engineers to seamlessly incorporate cybersecurity controls and risk management processes into their day-to-day operations.
• Strong communication skills with the ability to translate complex technical concepts into business language
• Experience with security standards/frameworks such as ISO 27001, SOC2, PCI, FedRAMP, NIST CSF, CIS CSC, etc.
• Interested in emerging technologies such as Artificial Intelligence or Quantum Computing and in general with the fast evolving threat landscape.