trace3 Senior Solutions Architect at Trace3 provides thought leadership in vulnerability and exposure management. The role leads complex client engagements and develops reference architectures to reduce cyber risk.
Responsibilities
Provide architect-level thought leadership across vulnerability and exposure management domains
Help organizations evolve from traditional vulnerability scanning to continuous, risk-driven exposure management
Integrate people, processes, and technology to reduce cyber risk
Lead Trace3's most complex client architecture engagements
Translate client work into reference architectures, repeatable offerings, and enablement for regional teams
Qualification
Bachelor's degree in Computer Science8+ years of experience in cybersecurityPractical understanding of automation
Required
Bachelor's degree in Computer Science, Cybersecurity, Information Security, Engineering, or a related discipline from an accredited college or university, or equivalent measurable knowledge and experience gained through industry, military, defense, or government operations.
8+ years of experience in cybersecurity, with significant hands-on experience designing, implementing, operating, or modernizing enterprise vulnerability management or exposure management programs beyond product implementation alone.
Experience in a customer-facing presales, solutions architecture, or technology consulting role within a VAR, systems integrator, consultancy, or technology vendor.
Deep technical expertise in enterprise vulnerability management, risk-based vulnerability prioritization, CTEM principles, exposure assessment, and remediation lifecycle management.
Demonstrated experience with leading vulnerability and exposure management technologies, such as Tenable, Qualys, Rapid7, CrowdStrike Falcon Exposure Management, Wiz, Axonius, XM Cyber, or comparable enterprise platforms. Deep expertise in at least one major platform and working familiarity with others is preferred.
Demonstrated ability to design target-state vulnerability and exposure management architectures, including platform consolidation, technology integration, program modernization, and scalable operating models.
Experience developing or operating enterprise vulnerability management programs, including asset discovery, inventory and ownership, vulnerability identification, findings normalization, risk prioritization, remediation tracking, exception management, and executive-level reporting.
Strong working knowledge of vulnerability scoring and prioritization methodologies, including CVSS, EPSS, CISA KEV, and SSVC, with the ability to incorporate threat intelligence, exploitability, and business context into defensible remediation decisions.
Familiarity with external attack surface management (EASM), cyber asset attack surface management (CAASM), attack path analysis, breach and attack simulation, and adversarial validation techniques.
Experience integrating vulnerability and exposure management platforms with enterprise systems such as CMDB, ITSM, SOAR, cloud security platforms, and security analytics solutions to enable scalable remediation workflows and operational reporting.
Working knowledge and experience with major cloud service providers (AWS, Azure, GCP), including cloud workload security, container security, native security tooling, and cloud vulnerability and exposure management considerations.
Practical understanding of automation, orchestration, and AI-assisted security capabilities, including their application to vulnerability prioritization, remediation workflows, threat intelligence enrichment, and exposure reporting.
