Cybersecurity Architect IV

General Atomics (GA), and its affiliated companies, is one of the world’s leading resources for high-technology systems development ranging from the nuclear fuel cycle to remotely piloted aircraft, airborne sensors, and advanced electric, electronic, wireless and laser technologies.

DUTIES AND RESPONSIBILITIES:

We currently have an exciting opportunity for a Cybersecurity Architect to join our corporate ITS Cybersecurity Threat Management Team. This role is located in Rancho Bernardo, CA.

Working under limited direction, this position provides technical leadership for enterprise cybersecurity monitoring, threat detection, incident response, threat hunting, and penetration testing activities across complex technology environments. The role responds to significant cybersecurity incidents, develops advanced detection capabilities, and partners with engineering, infrastructure, architecture, and security teams to strengthen enterprise cyber defense. This position also provides subject matter expertise in securing AI-enabled capabilities and drives continuous improvement of monitoring strategies, operational processes, and security technologies to reduce organizational risk and improve incident response effectiveness.

DUTIES AND RESPONSIBILITIES:

• Drives enterprise security monitoring operations by developing and optimizing detection strategies, alerting, dashboards, and operational workflows.
• Executes investigation and response activities for significant and complex cybersecurity incidents, including containment, eradication, recovery, and root cause analysis.
• Develops, implements, and continuously improves advanced detection rules, correlation logic, analytics, and response automation.
• Conducts and leads proactive threat hunting activities to identify suspicious behavior, indicators of compromise, gaps in monitoring coverage, and emerging attack patterns across enterprise environments.
• Performs or coordinates penetration testing and adversary simulation activities to identify vulnerabilities, validate security controls, and recommend corrective actions.
• Leads cross-functional incident response efforts by coordinating with engineering, infrastructure, leadership, and external partners during major cybersecurity events.
• Develops and maintains incident response standards, operational playbooks, response procedures, and technical documentation.
• Executes post-incident reviews and drives implementation of strategic corrective actions and continuous operational improvements.
• Evaluates, recommends, and implements security monitoring, detection, incident response, and assessment technologies that enhance enterprise cybersecurity capabilities.
• Provides technical leadership and mentorship to engineers in the areas of threat detection, incident response, threat hunting, penetration testing, and cybersecurity operations.
• Partners with engineering and architecture teams to integrate monitoring, detection, testing, and response requirements into enterprise systems, applications, cloud environments, and AI-enabled capabilities.
• Analyzes internal and external threat intelligence, attack trends, and adversary tactics, techniques, and procedures to improve enterprise detection, hunting, testing, and response capabilities.
• Supports the assessment and improvement of security controls, monitoring coverage, and response readiness across on-premises and cloud environments.
• Provides subject matter expertise in securing AI-enabled capabilities, including AI applications, models, data flows, service integrations, and agentic workflows.
• Evaluates risks associated with AI and agentic development, including misuse, privilege escalation, data exposure, prompt manipulation, insecure integration patterns, and unauthorized autonomous actions, and recommends mitigating controls.
• Represents the team as a technical point of contact with internal stakeholders and external partners, as required.
• Maintains the strict confidentiality of sensitive information.
• Responsible for observing all laws, regulations, and other applicable obligations wherever and whenever business is conducted on behalf of the Company. Expected to work in a safe manner in accordance with established operating procedures and practices.
• Performs other duties as assigned.

We recognize and appreciate the value and contributions of individuals with diverse backgrounds and experiences and welcome all qualified individuals to apply.

 

• Typically requires a bachelor's or master's degree in computer science, information technology or related field and nine or more years of progressive experience in cybersecurity with a bachelor's or seven or more years with a master's.  Equivalent professional experience may be substituted in lieu of education.  
• Must demonstrate advanced knowledge of enterprise security monitoring, threat detection, incident response, detection engineering, SIEM platforms, endpoint security technologies, threat intelligence, threat hunting methodologies, penetration testing techniques, security automation, and cybersecurity best practices.
• Must have experience leading complex cybersecurity incidents, developing enterprise detection strategies, conducting threat hunting or penetration testing activities, implementing security technologies, and driving operational improvements across large and complex technology environments.
• Must have experience supporting or securing AI-enabled solutions and a working understanding of the security considerations associated with AI applications, models, data handling, service integrations, orchestration frameworks, and agentic workflows.
• Must possess the ability to evaluate emerging threats, influence enterprise cybersecurity strategy, and lead continuous improvement of threat detection, threat hunting, penetration testing, and incident response capabilities.
• Excellent analytical, verbal, and written communication skills are required, along with strong interpersonal skills to effectively interface with technical professionals, leadership, and cross-functional stakeholders.
• Must be customer focused and possess:
  • The ability to lead enterprise cybersecurity monitoring and incident response across complex technology environments.
  • The ability to analyze sophisticated threats, coordinate complex investigations, and direct effective incident response activities.
  • The ability to design and implement advanced detection strategies, response automation, and operational improvements.
  • The ability to conduct proactive threat hunting and penetration testing activities to identify control weaknesses and security gaps.
  • The ability to develop enterprise standards, response procedures, playbooks, and technical documentation.
  • The ability to evaluate and implement technologies that improve enterprise threat detection, testing, hunting, and incident response capabilities.
  • The ability to mentor engineers and provide technical leadership across cross-functional cybersecurity teams.
  • The ability to influence technical decisions and communicate cybersecurity risks and response strategies to technical and executive stakeholders.
  • The ability to assess risks associated with AI-enabled capabilities and recommend practical mitigating controls.
  • The ability to lead multiple strategic initiatives while balancing operational priorities and organizational objectives.
• Must have the ability to obtain and maintain a DoD Security clearance.
• The ability to work independently and in a team environment is essential, as is the ability to work extended hours and travel as required.

This position may transition to fully on-site as the business demand/requirements change.