Neiman Marcus Group is a relationship business that leads with love in everything we do—for our customers, associates, brand partners, and communities. Our legacy of innovating and our culture of Belonging guide our roadmap for Revolutionizing Luxury Experiences. 

Your Role 

This position reports to the Chief Information Security Officer and frequently interacts with both the Director of Information Security Architecture and Operations and the Director of Governance, Risk, and Compliance. The principal security architect is responsible for designing security solutions that protect the business without interfering with the business’ ability to execute and innovate. They work closely with many diverse and dynamic teams, including, but not limited to, security engineering, IT infrastructure, application development, security operations, risk and compliance, and end users. This position is also responsible for architecting solutions to secure business-to-business initiatives, third-party relationships, outsourced solutions, and vendors. 

The principal security architect provides expert guidance for addressing current security issues and has the foresight to see where the industry is headed to proactively deliver cutting edge secure solutions. The architect is expected to think like an adversary to identify how solutions need to evolve and adapt to an ever-changing threat landscape. A senior-level role, the architect possesses strong communication and organizational skills, and the ability to guide less experienced coworkers. The architect provides technical leadership to delivery and solution design team members. You’ll report to the Chief Information Security Officer and work remotely. 

What You’ll Do 

• Provide Cybersecurity Technical thought leadership across the following areas: Zero Trust Networking, Identity, Data Security, Endpoint Security, Email Security.
• Remain current with new security threats that target the retail vertical and assess security systems to ensure they properly mitigate the risk associated with the threats.
• Research capabilities of current and new solutions on a regular basis for potential expansion or replacement of security tooling.
• Research, validate and deploy solutions that meet security and business requirements.
• Participate in the development of security team standards, policies, procedures and processes.
• Influence the planning and execution of incident response and postmortem exercises, with a focus on creating measurable benchmarks to show progress (or deficiencies requiring additional attention).
• Possess a SecDevOps focus across technology and security architecture, automation, integration and distribution.
• Drive security efficiencies, enabling security team members to work on more advanced tasks.
• Partner, coach, and functionally lead IT, engineering, development, and business teams.
• Perform engineering performance testing to stress the limitations of security solutions while at the same time ensuring business innovation and day-to-day processes are not negatively impacted.
• Perform other duties as assigned. 

What You Bring 

• At least 6 to 9+ years’ experience in cybersecurity, with a background in system and network security engineering and architecture.
• A proven deep background in technology design, implementation and delivery.
• Experience in cloud computing technologies, including software-, infrastructure and platform-as-a-service, as well as public, and hybrid environments.
• Excellence in communicating business risk from cybersecurity issues.
• Experience driving measurable improvement in monitoring and response capabilities at scale.
• Experience architecting SIEM systems, threat intelligence platforms, security automation and orchestration solutions, IDS/IPS, file integrity monitoring, data loss prevention, endpoint detection and response, zero trust solutions, identity and access management systems, enterprise browser solutions, and other network and system monitoring tools.
• Track record of acting with integrity, taking pride in work, seeking to excel, being curious and adaptable, and communicating effectively. 

Additional Qualifications 

• Experience with Amazon Web Services (AWS), Google Cloud, and Microsoft Azure.
• Cloud access security broker, cloud security posture management, SaaS security posture management, and Cloud Native Application Protection Platform experience
• Proficient with scripting in PowerShell, Python, JavaScript, PHP or Ruby.
• Experience with one or more of the following: ISO 27001, NIST, Payment Card Industry Data Security Standard (PCI DSS), Sarbanes-Oxley Act (SOX), the General Data Protection Regulation (GDPR), Center for Internet Security (CIS) standards, or Service Organization Controls (SOC) 2.
• Working knowledge of Windows, Linux, and Unix.
• Ability to think strategically and tactically, with effective decision-making skills.
• Experience with purple teaming (red and blue) to train, identify and remediate issues cohesively.
• Highly trustworthy; leads by example.