Associate Security Architect

Caesars Entertainment

. Intake and triage incoming Security Architecture Review requests against SAR trigger criteria .

Posted 10/9/2026full-timeLas Vegas • Nevada • United StatesJuniorMid-LevelWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in Security Architecture Review processes, including risk assessment documentation and security gap analysis across various domains such as IAM, cloud, and application security. Proficient in threat modeling methodologies and familiar with compliance standards like PCI-DSS and GDPR.

Highest-signal resume keywords

Security Architecture ReviewThreat Modeling (STRIDE, MITRE ATT&CK)Cloud Security Fundamentals (AWS)Security Certifications (Security+, AWS/Azure Security Associate)Infrastructure-as-Code Security (Terraform)

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Security Architecture ReviewRisk Assessment DocumentationThreat ModelingCloud Security FundamentalsInfrastructure-as-Code SecurityGitLab CI/CD SecurityMCP Security ConceptsSecurity Gap AnalysisBusiness Impact AssessmentSecurity Control Implementation

Soft Skills

Strong Written CommunicationCollaborative Working StyleInfluencing Teams

Tools & Technologies

AWS BedrockGitLab CI/CDTerraformTfsecCheckov

Certifications & Qualifications

Security+AWS Security AssociateAzure Security AssociateCISSP (Progress Toward)CCSP (Progress Toward)

Industry Keywords

IAMNetwork SecurityCloud SecurityApplication SecurityData SecurityPCI-DSSSOXGDPRCCPAGRC

Tech Stack

Tools & technologies

AWSAzureCloudSDLCTerraform

About the role

Key responsibilities & impact

Intake and triage incoming Security Architecture Review requests against SAR trigger criteria
Draft review notes documenting proposed architectures, security gaps, and recommended controls mapped to ESAF patterns
Track solution-team implementation of recommended controls and responses to review feedback
Participate in threat-modeling sessions and consultations
Help conduct Business Impact Assessments and security risk categorization under senior review
Apply risk-based BIA security checklists
Prepare risk-assessment documentation for decision-making
Maintain and update ESAF security patterns, reference architectures, and control libraries across AI, application, cloud, data, endpoint, GRC, IAM, infrastructure, and network domains
Participate in weekly architecture reviews, monthly pattern updates, and knowledge-sharing sessions
Communicate security requirements to solution teams

Requirements

What you’ll need

1–3 years in a security-adjacent role (security analyst, GRC, SOC, IT audit, or solution/security engineering)
Working knowledge of core security domains: IAM, network, cloud, application, and data security
Familiarity with at least one threat-modeling approach (e.g., STRIDE) or the MITRE ATT&CK framework
Awareness of PCI-DSS, SOX, gaming commission requirements, and privacy laws (GDPR/CCPA)
Strong written communication
Collaborative, diplomatic working style; comfortable influencing teams without direct authority
Cloud security fundamentals, with AWS emphasis
Exposure to AWS Bedrock and agentic AI security
Understanding of MCP security concepts, including JWT/OAuth 2.0, tool-level access control, and centralized audit logging
Familiarity with GitLab CI/CD security, pipeline hardening, protected branches/environments, merge-request approvals, CI/CD variables, Secret Detection, Dependency Scanning, and secrets management
Infrastructure-as-Code security exposure, including Terraform with tfsec/checkov and encrypted/locked state
Security certifications such as Security+, AWS/Azure security associate, or progress toward CISSP/CCSP
Experience with SDLC/DevOps and CI/CD security integration

Benefits

Comp & perks

Hybrid work arrangement
Mentorship from senior architects
Opportunities to grow into an advisory role
Participation in knowledge-sharing sessions