What does a security architect do? | Cybersecurity Career Series

Summary

In this InfoSec Career Video Series, Leighton Johnson, author of InfoSec Skills, discusses the role of a security architect. Johnson explains that security architects are responsible for creating and guiding the implementation of security solutions within an organization. They must have in-depth knowledge of security, systems, networks, and risk management. To become a security architect, one should consider obtaining a degree in cybersecurity or information security, gaining experience, and earning relevant certifications like Security+, CISSP, and ISSAP. The role requires technical skills in understanding security components and soft skills in risk management. Johnson also highlights the importance of having a holistic view of security from both a business and IT perspective.

Takeaways

• 🔒 A security architect is responsible for creating, planning, and guiding the implementation of security solutions within an organization, requiring in-depth knowledge of security, systems, networks, and risk management.
• 🎓 Becoming a security architect typically requires a combination of formal education in cybersecurity or information security, professional certifications, and practical experience in the field.
• 📚 Key certifications that can bolster a security architect's expertise include Security+, CISSP, and ISSAP, which focuses on security architecture.
• 💼 The role is not entry-level and demands a comprehensive understanding of an organization's risk management strategies and IT infrastructure architecture.
• 🛠️ Security architects need a range of technical skills, including knowledge of firewalls, intrusion detection systems, network access, and operating system security across different platforms.
• 🌐 They must also grasp the integration of security components, data flow mapping, and system design, often utilizing frameworks like TOGAF, SABSA, and DoDAF.
• 🔍 Day-to-day tasks involve conducting vulnerability assessments, risk reviews, and guiding security engineering updates to ensure the organization's security posture is robust.
• 🏢 Security architects often work as regular employees within companies, gaining institutional knowledge over time, which makes them invaluable for long-term strategic planning.
• 🔄 The role can serve as a stepping stone to higher positions such as Chief Information Security Officer (CISO) or technical lead for security within an organization.
• 🌐 In the federal or military space, security architects may deal with additional layers of complexity and compliance requirements, unlike in the commercial sector where they often set security standards across business units.

Q & A

What is the primary role of a security architect?

A security architect creates, plans, and provides guidance on the implementation of security solutions for an organization. They are knowledgeable in security, systems, networks, computing, risk management, and the overarching IT infrastructure architecture of the organization.

What educational background is beneficial for becoming a security architect?

Having a degree in cybersecurity or information security is a good start. Additionally, gaining years of experience and professional certifications in security and IT can provide the necessary understanding for the role.

Which certifications are recommended for someone aspiring to be a security architect?

Starting with basic security certifications like Security+ and CISSP is recommended. For those specifically interested in architecture, the ISSAP (Information System Security Architecture Professional) certification can be particularly helpful.

What are the technical skills a security architect needs to possess?

Security architects need to understand how security components work, including firewalls, intrusion detection systems, network access segmentation, and operating system security across platforms like Windows, Linux, Unix, and Macintosh.

How does a security architect's role differ in the context of risk management?

A security architect must understand risk management and how it is implemented within the organization. They need to have an organizational view of risk handling, which is crucial for planning and implementing security solutions.

What are some tools and frameworks that security architects use in their work?

Security architects use various tools and frameworks such as FEA (Federal Enterprise Architecture), DoDAF (Department of Defense Architecture Framework), TOGAF, SABSA, data flow maps, and diagrams, as well as standards from ISO, ITIL, COSO, and COBIT.

Are there open-source tools available for security architects?

Yes, SABSA and TOGAF are open-source frameworks that security architects can use. Additionally, the architectural components in DoDAF and FEA are also available as open resources.

Where do security architects typically work, and what kind of employment structure do they have?

Security architects typically work as regular employees of companies, often at a business unit level or above, where they can gain institutional knowledge over time and become more valuable to the organization.

What additional layers or considerations are there for security architects working in federal or military spaces?

In the military, there are additional layers and considerations due to the nature of the work. However, in the federal space, security architects generally work similarly to those in commercial organizations, focusing on enterprise architecture and security across multiple organizations.

What career progression opportunities are available for security architects?

Security architects can progress to roles such as Chief Information Security Officer (CISO) or technical leads for the CISO. Their comprehensive understanding of an organization's security layout makes them valuable for higher-level positions.

What immediate steps can someone take to move towards becoming a security architect after watching this video?

To move towards becoming a security architect, one should understand vulnerabilities and weaknesses from both a security and business perspective. Learning about the business side, especially if it's less familiar, can increase one's value and career progression as a security architect.