Security Architect

Who is Forcepoint? Forcepoint simplifies security for global businesses and governments. Forcepoint’s all-in-one, truly cloud-native platform makes it easy to adopt Zero Trust and prevent the theft or loss of sensitive data and intellectual property no matter where people are working. 20&#43; years in business. 2.7k employees. 150 countries. 11k&#43; customers. 300&#43; patents. If our mission excites you, you’re in the right place; we want you to bring your own energy to help us create a safer world. All we’re missing is you! Join Forcepoint's Infrastructure Security team within the CISO organization as a Security Architect and play a key role in implementing organization-wide security strategy across our corporate infrastructure. You will own and administer the CISO security tool stack, design and implement security measures across endpoint, cloud, identity, email, and network environments, conduct security reviews and risk assessments, and serve as a technical security partner to IT, Engineering, DevOps, and Cloud Operations teams. This role is grounded in security architecture and design, with direct platform ownership to ensure architectural decisions are operationally grounded. It requires a practitioner with broad command across the full IT stack spanning endpoint, cloud, identity, network, and application domains who can connect security strategy to execution across all layers of the environment. AI is a first-class tool in this role: you are expected to use it actively in your day-to-day work and to understand the security risks it introduces.    Key Responsibilities    Platform Administration & Operations  Own and administer CISO-managed security platforms including EDR/XDR, CSPM, DSPM, DLP, Web/Email Security, and EASM tools.  Maintain platform health, coverage, and configuration; identify and implement tuning and optimization opportunities to improve detection, posture, and operational efficiency.  Build and maintain automation workflows and scripts to reduce manual effort and improve response capabilities.  Security Architecture & Design  Assess the corporate and cloud environment to identify security gaps, recommend improvements, and design controls that reduce risk across endpoint, identity, cloud, and network domains.  Develop and maintain security architecture documentation, reference designs, and technical standards that guide consistent security decision-making across the organization.  Evaluate new and existing security technologies; provide recommendations on adoption, integration, and configuration aligned with the team's strategic direction.  Cloud, Vulnerability & Exposure Management  Assess and advise on cloud security posture across AWS and Azure environments; partner with the relevant cloud and infrastructure teams to track and drive remediation of misconfigurations and findings within defined SLAs.  Oversee vulnerability management and continuous threat exposure management (CTEM) coverage; work with IT and engineering teams to prioritize and close findings based on exploitability and business impact; report status to Security leadership.  Identity & Access Management  Assess and advise on identity and access controls across the corporate environment, including SSO, MFA, conditional access, and privileged access management.  Identify identity-related risks and recommend architectural improvements; support remediation efforts in partnership with IT.  Cross-functional Collaboration  Serve as a primary security technical partner to IT, Engineering, DevOps, and Cloud Operations teams on infrastructure-related initiatives; provide architectural guidance and hands-on support, and act as a focal point for infrastructure security discussions across these teams.  Support the SOC team throughout the incident lifecycle by providing architectural context that informs containment decisions and drives systematic infrastructure improvements through completion.  Provide technical security support to the GRC team on compliance evidence, customer security questionnaires, and audit activities; provide technical security support to the AppSec team on responsible disclosure handling and external vulnerability research engagement.  Contribute to security strategy and roadmap discussions led by the CISO and Sr. Manager, Cybersecurity Architecture & Security Operations; provide technical input that shapes prioritization and execution.  Track and drive infrastructure security workstreams through to completion; document progress, follow up on commitments, and coordinate stakeholders across teams to keep work moving.  Provide customer-perspective feedback to Forcepoint Engineering and Product Management on Forcepoint products in use within the corporate environment; test new features for fit before internal rollout (this is not a QA function).  AI Usage  Actively use AI tools in daily work to accelerate research, scripting, documentation, and analysis; apply sound judgment about data handling and appropriate use.  Stay current on AI-specific security risks and contribute to internal AI governance and acceptable use practices.    Qualifications  5&#43; years of IT experience with at least 3 years in a dedicated security role.  Hands-on background spanning security and at least one adjacent IT or software engineering discipline: systems administration, network administration, cloud infrastructure, application security, DevSecOps, or application support. Breadth across the IT stack is more valuable than deep specialization in a single area.  Experience administering and operating multiple enterprise security platforms in production environments.  Familiarity with AWS and/or Azure security services and cloud security concepts.  Strong written and verbal communication skills; able to translate technical findings into clear risk language for a range of audiences.  Active daily use of AI tools with demonstrated ability to apply them responsibly and effectively.    Preferred Skills  Experience with Forcepoint security products (Cloud Web, Cloud Email, DLP, DSPM) or comparable enterprise platforms.  Familiarity with CrowdStrike Falcon across EDR, Identity Protection, and Cloud Security modules.  Experience working alongside IT, Cloud Operations, DevOps, SOC, GRC, or AppSec teams in a technical advisory or support capacity.  Security certifications such as CISSP, CCSP, AWS Security Specialty, CISM, or GIAC are preferred but not required.    Education  A bachelor's degree in Computer Science, Information Technology, Information Security, or a related field is preferred. Equivalent professional experience demonstrating the required technical depth and breadth will be considered in lieu of a degree.  Location & Work Model  Primary location: Cork, Ireland.  Hybrid work model with occasional travel (<10%).    Don’t meet every single qualification? Studies show people are hesitant to apply if they don’t meet all requirements listed in a job posting. Forcepoint is focused on building an inclusive and diverse workplace – so if there is something slightly different about your previous experience, but it otherwise aligns and you’re excited about this role, we encourage you to apply. You could be a great candidate for this or other roles on our team. The policy of Forcepoint is to provide equal employment opportunities to all applicants and employees without regard to race, color, creed, religion, sex, sexual orientation, gender identity, marital status, citizenship status, age, national origin, ancestry, disability, veteran status, or any other legally protected status and to affirmatively seek to advance the principles of equal employment opportunity. Forcepoint is committed to being an Equal Opportunity Employer and offers opportunities to all job seekers, including job seekers with disabilities. If you are a qualified individual with a disability or a disabled veteran, you may request a reasonable accommodation if you are unable or limited in your ability to use or access the Company’s career webpage as a result of your disability. You may request reasonable accommodations by sending an email to recruiting&#64;forcepoint.com. Applicants must have the right to work in the location to which you have applied.