Information Security Architect

About the role

You will own information security across the Aura platform, infrastructure, and organization — from security architecture and compliance certifications to customer-facing security assurance and incident response. We need someone who can drive certifications, strengthen our security architecture, and be the trusted security voice to our regulated customers.

What you'll do

• Security Architecture & Engineering
• Define and maintain the platform's security architecture — network segmentation, encryption, access control, API security, and key management
• Review and approve infrastructure changes, new integrations, and API exposure decisions
• Own the vulnerability management program — dependency scanning, CVE triage, patching, and remediation tracking
• Oversee security monitoring tooling (Wazuh SIEM, EWACS, CloudWatch) — detection rules, alert triage, and tuning

What you need

• 8–14 yrs of experience
• SIEM
• ISO 27001
• IAM
• OWASP
• Incident response
• Splunk
• Any graduate

Good to have

• CISSP
• CISM
• Vulnerability assessment
• AWS
• Penetration testing
• Data privacy