Senior Solutions Architect – Vulnerability/Exposure Management

Trace3

. Lead complex client engagements as the senior architect for vulnerability management modernization, CTEM program development, exposure management architecture, and risk-based remediation strategies .

Posted 10/23/2026full-timeRemote • Texas • United StatesSenior💰 $175,000 - $200,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in designing and implementing enterprise vulnerability management and exposure management programs, integrating advanced technologies and methodologies for risk-based prioritization and remediation. Capable of leading client engagements, conducting technical workshops, and delivering executive-level presentations.

Highest-signal resume keywords

Enterprise Vulnerability ManagementRisk-Based Vulnerability PrioritizationCTEM PrinciplesCloud Security PlatformsTechnical Documentation

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Vulnerability ManagementExposure ManagementRisk PrioritizationAutomationOrchestrationTechnical Architecture DesignThreat DetectionSecurity AssessmentsCloud Workload SecurityAdversarial Validation

Soft Skills

Executive CommunicationInterpersonal SkillsProblem-SolvingOrganizationTime Management

Tools & Technologies

TenableQualysRapid7CrowdStrike Falcon Exposure ManagementAWSAzureGCPSIEMSOARMicrosoft Sentinel

Industry Keywords

CybersecurityInformation SecurityNIST CSFCIS ControlsMITRE ATT&CKCTEMEASMCAASMBreach and Attack SimulationExecutive Reporting

Tech Stack

Tools & technologies

AWSAzureCloudCyber SecurityGoogle Cloud PlatformITSMSplunk

About the role

Key responsibilities & impact

Lead complex client engagements as the senior architect for vulnerability management modernization, CTEM program development, exposure management architecture, and risk-based remediation strategies
Assess client vulnerability and exposure management capabilities, technologies, processes, and operational maturity
Design target-state architectures integrating vulnerability scanning, attack surface management, cloud and container security, identity exposure, and attack path analysis
Develop and operationalize CTEM programs for exposure discovery, prioritization, validation, and remediation
Define risk-based prioritization methodologies using CVSS, EPSS, CISA KEV, threat intelligence, asset criticality, exploitability, compensating controls, and business context
Architect operating models covering asset ownership, remediation workflows, SLAs, exception management, risk acceptance, executive reporting, and team integration
Design automation and orchestration workflows for findings normalization, enrichment, ticketing, workflow integration, and remediation validation
Evaluate and incorporate AI-assisted and agentic capabilities with governance and human oversight
Incorporate threat-informed validation, attack path analysis, breach and attack simulation, penetration testing, and purple-team findings
Collaborate with SOC/SIEM architects to integrate exposure intelligence with detection and response platforms
Develop reference architectures, assessment methodologies, solution briefs, packaged offerings, and delivery playbooks
Collaborate with Security Solutions practices, regional teams, Managed Services, and Service Delivery
Serve as a technical counterpart to strategic security technology partners
Support account teams with technical discovery, solution architecture, competitive positioning, proposals, SOWs, effort estimation, and technical validation
Deliver technical enablement, workshops, and knowledge-sharing sessions; mentor junior architects and early-career practitioners
Provide secondary architectural and presales support across SIEM/SOAR, EDR/XDR, SOC modernization, threat intelligence, and AI-enabled security operations
Represent Trace3 through executive briefings, partner engagements, industry events, thought leadership, and technical presentations

Requirements

What you’ll need

Bachelor's degree in Computer Science, Cybersecurity, Information Security, Engineering, or a related discipline from an accredited college or university, or equivalent measurable knowledge and experience gained through industry, military, defense, or government operations
8+ years of experience in cybersecurity, with significant hands-on experience designing, implementing, operating, or modernizing enterprise vulnerability management or exposure management programs beyond product implementation alone
Experience in a customer-facing presales, solutions architecture, or technology consulting role within a VAR, systems integrator, consultancy, or technology vendor
Deep technical expertise in enterprise vulnerability management, risk-based vulnerability prioritization, CTEM principles, exposure assessment, and remediation lifecycle management
Demonstrated experience with leading vulnerability and exposure management technologies, such as Tenable, Qualys, Rapid7, CrowdStrike Falcon Exposure Management, Wiz, Axonius, XM Cyber, or comparable enterprise platforms
Ability to design target-state vulnerability and exposure management architectures, including platform consolidation, technology integration, program modernization, and scalable operating models
Experience developing or operating enterprise vulnerability management programs, including asset discovery, inventory and ownership, vulnerability identification, findings normalization, risk prioritization, remediation tracking, exception management, and executive-level reporting
Working knowledge of CVSS, EPSS, CISA KEV, and SSVC
Familiarity with EASM, CAASM, attack path analysis, breach and attack simulation, and adversarial validation techniques
Experience integrating platforms with CMDB, ITSM, SOAR, cloud security platforms, and security analytics solutions
Experience with AWS, Azure, and GCP, including cloud workload security, container security, native security tooling, and cloud vulnerability and exposure management
Practical understanding of automation, orchestration, and AI-assisted security capabilities
Working knowledge of SIEM/SOAR, EDR/XDR, threat detection and response, and SOC operations
Understanding of CrowdStrike, Palo Alto Networks Cortex XSIAM, Microsoft Sentinel, Splunk, or Google SecOps
Working knowledge of NIST CSF, NIST SP 800-40, CIS Controls, MITRE ATT&CK, ISO 27001, and CTEM-aligned exposure management frameworks
Ability to conduct technical workshops, security assessments, architectural reviews, and executive briefings
Experience creating technical documentation, presentations, architectural designs, implementation plans, proposals, SOWs, and strategic roadmaps
Strong executive communication, interpersonal, collaboration, and customer presentation skills
Strong problem-solving, organization, detail orientation, and time management skills
Ability to manage multiple and changing priorities while meeting deadlines
Ability to travel when needed (approximately 25–35%); holds a valid driver’s license

Benefits

Comp & perks

Comprehensive medical, dental and vision plans for you and your dependents
401(k) Retirement Plan with Employer Match
529 College Savings Plan
Health Savings Account
Life Insurance
Long-Term Disability
Competitive Compensation
Training and development programs
Major offices stocked with snacks and beverages
Collaborative and cool culture
Work-life balance
Generous paid time off