Security Architect

Position Overview:

Join the team at Ledger in their goal to make digital assets accessible and secure for all. Established in 2014, Ledger serves as a global platform for digital assets and Web3 technologies. With headquarters in Paris and Vierzon, and additional offices in various countries, the company boasts a team of over 900 professionals. Their mission involves developing products and solutions to facilitate the secure acquisition, storage, exchange, growth, and management of crypto assets – including the popular Ledger hardware wallets that have been sold in over 200 countries.

The Security Architect role at Ledger holds a crucial position in the company's cybersecurity structure, tasked with overseeing aspects such as network architecture, security framework, and system hardening. The ideal candidate will be pivotal in designing and enhancing the security infrastructure critical to Ledger’s operations, necessitating a forward-thinking approach to develop scalable and resilient security solutions.

As a key player in shaping Ledger's security strategies, you will spearhead the formulation of robust security architectures and frameworks to ensure the company's defenses remain impregnable against emerging cyber threats. This role caters to cybersecurity enthusiasts with a profound interest in network security and its strategic implications within the realms of Web3 and hardware wallets.

Primary Responsibilities:

• Design and implement cybersecurity architectures for systems and networks with specific security prerequisites
• Execute proofs of concept and deploy security solutions effectively
• Define cybersecurity architectural standards, aligning acquired or developed systems with these guidelines
• Perform security assessments, pinpoint vulnerabilities in the security infrastructure, and outline risk mitigation plans for the overall IT landscape
• Collaborate with teams to conduct threat modeling for secure architecture development
• Engage in shaping enterprise-level policies concerning cloud security governance, particularly with AWS and Kubernetes environments
• Provide guidance and support to Infrastructure engineers on best cloud and architecture security practices, advocating for security protocols within their respective teams
• Assist the SIEM Threat Detection Engineer in enhancing SIEM & SOAR capabilities by integrating new actionable insights into security protocols

Desired Qualifications:

• Over 8 years of experience in cybersecurity with expertise in architecting and implementing secure IT environments, both cloud-based and on-premises
• Proficient in Identity and Access Management design, Zero Trust Network Access (ZTNA), and access control frameworks
• Capability in overseeing Secure Software Development Lifecycle (SSDLC) practices throughout an organization
• Familiarity with security standards such as NIST, CIS, ISO 27001, SOC 2 Type 2, GDPR, and ideally SLSA protocols
• Experience in API security and a strong grasp of compliance requirements
• Excellent verbal and written communication skills essential for effective presentation and articulation

Benefits and Perks:

• Stock options
• Hybrid work policy
• Company outings and social events
• Comprehensive health insurance coverage
• Personal development programs, coaching, and fitness options
• Generous paid leave, including national holidays and rest & relaxation days
• Access to top-tier office equipment and gadgets
• Transportation reimbursement
• Employee discounts on in-house products

At Ledger, we embody diversity and uphold equal opportunities for all candidates, irrespective of gender, ethnicity, religion, sexual orientation, social background, disability, or age.