Security Architecture, Engineering & Threat Operations Lead - Banking

Xenon7

Job Summary:

This role covers highly technical disciplines within InfoSec: security architecture, engineering review, and the maturation of vulnerability and patch management systems. The specialist works closely with internal Security Architecture managers and the Security Operations Center (SOC) team to strengthen the bank's detection and defensive posture, ensure new infrastructure designs are secure by design, and fully operationalize the vulnerability management lifecycle.

 Key Responsibilities:

A. Security Architecture & Engineering Assessment

Review new and changed system designs, network architectures, and digital platform builds from an

information security perspective, prior to build or procurement approval.

Produce Security Architecture Review Reports with risk-rated findings, threat model summaries, and

design recommendations aligned to security standards and CBE requirements.

Assess security of APIs, cloud components, integration layers, and digital banking platforms (mobile,

internet banking, payment processing) against OWASP, NIST, and CBE guidelines.

Maintain an architecture review register tracking all submitted designs, decisions, and open risk items.

Contribute to the InfoSec reference architecture and security design patterns library.

B. Tenable SC Vulnerability & Patch Management

Take ownership of Tenable Security Center (SC) and other vulnerability solutions configuration, scan

policy design, and coverage assurance across full asset inventory.

Design and implement a structured vulnerability management workflow scan, triage, risk-rate, assign,

track, and verify remediation integrated with IT's patch management process.

Produce weekly and monthly vulnerability dashboards for IT and InfoSec leadership showing patch SLA

compliance, critical exposure trends, and remediation velocity.

Define and enforce scan coverage SLAs: all in-scope assets scanned at appropriate frequency per asset

criticality tier.

Identify and escalate monitoring blind spots unscanned, uncredentialed, or unreachable assets and

drive resolution with IT.

Enable Tenable SC reporting to feed directly into KRI metrics for board-level visibility on patch SLA

breach rate and vulnerability exposure.