Senior Security Architect



Prague, Czechia
Posted on Monday, October 16, 2023

Senior Security Architect

This role is for someone who is looking to positively impact Rapid7 with their information security knowledge by contributing to Security Trust & Governance operations. An information security and/or information technology background would set you up for success in this position. Your ability to successfully carry out cross-functional work will require strong communication skills, patience, and a solution-oriented attitude.

You’ll join us in our new Prague (Czech Republic) office and work with an energized team that cares deeply about the success of these initiatives, and leadership that values work-life balance, an inclusive culture, and your ongoing career development.

About the Team

Rapid7’s Trust & Security Governance team functions within the Information Security department and plays a crucial role in supporting the organization’s mission. We ensure we meet our duty of care to our customers, employees, and shareholders by creating effective governance for upholding internal security policies, identifying and managing security risk, distributing foundational security expertise across every department to create an exceptional security culture, and bolstering customer and community trust by providing accessible and transparent information about our internal security program. This role partners closely with other InfoSec teams, Legal, Procurement, and many other teams at Rapid7.

About the Role

We’re looking for a Senior Security Architect to help with the evaluation of the information security risks and technical challenges that Rapid7 faces and partner closely with stakeholders throughout the organization to drive continued awareness and improvement in the Security GRC domain.

In this role, you will:

  • Evaluate security risks in new and existing products and processes.

  • Provide recommendations and influence Rapid7 stakeholders to implement the right level of security.

  • Address questions about Rapid7’s internal security program from customers, prospects, and auditors. This will often require working with other members of the Information Security team, and with other Rapid7 teams, including Engineering, Product Management, Content Strategy, and Legal.

  • Work in different initiatives simultaneously managing expectations with all stakeholders.

  • Assist lead members of the security team with tasks related to:

    • Provide Security Architect input to other projects and initiatives

    • Identify risks while evaluating the design and operational effectiveness of controls to report opportunities for improvement

    • Define and product metrics for Management consumption

    • Aiding in security awareness and culture initiatives throughout the company

    • Develop security guidance for different stakeholders

    • Workflow/process improvements

The skills you’ll bring include:

  • 6+ years of experience in information security, information technology, or an adjacent field.

  • Ability to apply a threat modeling perspective when evaluating complex systems to identify risks and recommendations.

  • identify service/product integrations risks and advice and influence business owners to make a secure use of third party products.

  • Strong project management abilities, including ability to coordinate initiatives across technical and non-technical teams/stakeholders and managing distributed teams and projects.

  • Experience collaborating closely with security partners, including incident response, red teams, architects, and engineers to seamlessly incorporate cybersecurity controls and risk management processes into their day-to-day operations.

  • Strong communication skills with the ability to translate complex technical concepts into business language

  • Experience with security standards/frameworks such as ISO 27001, SOC2, PCI, FedRAMP, NIST CSF, CIS CSC, etc.

  • Interested in emerging technologies such as Artificial Intelligence or Quantum Computing and in general with the fast evolving threat landscape.

We know that the best ideas and solutions come from multi-dimensional teams. That’s because these teams reflect a variety of backgrounds and professional experiences. If you are excited about this role and feel your experience can make an impact, please don’t be shy - apply today.

About Rapid7

Rapid7 (NASDAQ: RPD) helps organizations across the globe protect what matters most so innovation can thrive in an increasingly connected world. Our comprehensive technology, services, and community-focused research simplify the complex for security teams, helping them reduce vulnerabilities, monitor for malicious behavior, be in 10 places at once, and shut down attacks. We’re on a mission to make security solutions easier to use and access so we can bring safety and resilience to more people. With more than 10,000 customers across 140+ countries, Rapid7 is a leader in cybersecurity that has earned numerous industry accolades and recognition for our technology and culture.