Job Title: Solutions Architect
Location: Northern Virginia region or DC area. USA
Reports To: VP of Solution Delivery & Customer Success
About Cyware
Cyware delivers an innovative approach to cybersecurity that unifies threat intelligence, automation, threat response, and vulnerability management with data insights gleaned from assets, users, malware, attackers, and vulnerabilities. Cyware’s Cyber Fusion platform integrates SOAR and TIP technology, enabling collaboration across siloed security teams. Cyware is widely deployed by enterprises, government agencies, and MSSPs, and is the leading threat intelligence sharing platform for global ISACs and CERTs.
Your next opportunity starts here!
More on Cyware: (www.cyware.com)
Why We Are Hiring:
Cyware is seeking a Senior Solutions Architect to lead technical engagements across our public sector business, guiding federal, state, and local government customers and partners through the design, deployment, and integration of Cyware’s platform. This is a customer-facing technical leadership role requiring deep security architecture expertise combined with fluency in compliance, and operational environments.
You will sit at the intersection of Product and Customers, rapidly building use cases that demonstrate the value of Cyware’s threat intelligence, automation, and collective-defense platform across pre-sales and post-sales solutioning. You’ll work closely with Product, Engineering, and Customers to translate market needs into demonstrable architectures and reusable assets, shape the roadmap with field insight, and enable Sales Engineers, Product Managers, Technical Delivery Managers, and Customer Success Managers with a stronger technical story.
Your impact will be split between internal efforts—including Product collaboration, use-case development, maintaining the use case library, and team enablement—and external efforts, including POC use cases and customer solutioning. Above all, you understand the evolution of security operations toward AI-assisted and AI-autonomous (agentic) SOCs, intelligence-driven automation, and proactive, machine-speed defense.
About you:
- You are driven, inquisitive, proactive, and energetic
- You have a growth mindset and are committed to delivering results
- You thrive in a fast-paced, collaborative environment
Come join an exciting cybersecurity product startup that has closed its Series C funding round!
What You Will Do:
- Serve as the lead technical architect for public sector post-sales implementations, translating agency requirements into scalable Cyware architectures
- Design integrations across SIEM, EDR, Case Management, Cloud Security Technologies, and information sharing environments for federal (FedRAMP) Defense (IL5) and SLTT (GovRAMP) customers
- Rapidly build, package, and maintain reusable use cases and reference architectures on the Cyware platform, for threat intelligence operationalization, security automation, agentic/autonomous SOC workflows, and collective defense that can be used across pre-sales demos and post-sales delivery.
- Required Advisory expertise on compliance and accreditation requirements (FedRAMP High, NIST 800-53, CMMC, IL5, GovRAMP) as they relate to platform deployment
- Build compelling demos and narratives that clearly communicate the uniqueness of the value proposition to both technical decision-makers and executives.
- Collaborate with Product and Engineering on emerging capabilities (especially AI/agentic features), pressure-testing them against real use cases before they reach the field.
- Enable Sales Engineering, Technical Delivery, and Customer Success teams with reusable technical assets, reference architectures, enablement materials, and best practices.
- Support strategic deals with planning, architecture, and execution; anticipate concerns and offer creative solutions.
- Produce clear solution architecture models and documentation as key project deliverables.
- Hands-on experience with log management and analytics platforms (e.g., ELK-based stacks) in production environments — deployment, tuning, and integration with security tooling
- Partner with Sales, Product, and Technical Alliances to shape solution strategy for RFPs, RFIs, and security questionnaires (SIG/CAIQ/VSAQ)
- Own technical relationships with agency stakeholders, systems integrators, and government resellers
- Working knowledge of SOAR, TIP, SIEM, ServiceNow, Armis, Data pipelines, ELK, Other technologies.
- Serve as the field-facing voice back to Product and Engineering on public sector requirements and gaps
- Architect scalable solutions using Cyware’s Intel Exchange to streamline the ingestion, normalization, enrichment, and operationalization of multi-source threat data (STIX/TAXII, commercial feeds, OSINT, and ISACs).
- Guide customers on threat modeling and intelligence-driven defense practices, helping them pivot from reactive security postures to proactive threat hunting.
- Establish best practices for data governance, indicator lifecycle management, and false-positive reduction within the customer’s intelligence ecosystem.
- Strong understanding of AI-assisted and agentic AI security operations, including autonomous SOC use cases, governance considerations (explainability, guardrails, auditability), and emerging industry trends.
- Design and implement integrations between the Threat Intelligence Platform and enterprise security technologies using APIs, automation, and custom connectors.
- Act as a trusted advisor to enterprise customers, guiding their security leadership and operational teams on modern Cyber Threat Intelligence (CTI) strategies and maturity roadmaps.
- Conduct technical discovery workshops and gap analyses to understand unique customer workflows, pain points, and business objectives.
- Formulate tailored success plans that ensure customers maximize the return on investment (ROI) and utilization of their Cyber Threat Intelligence Platform (CTIP).
Who You Are:
- US Citizenship is a requirement of this position in accordance with 8 U.S.C 1324b(a)(2)(C).
- 10+ years of extensive experience as a highly seasoned professional in solution architecture, sales engineering, or security architecture, with a proven track record of deploying cybersecurity products for Federal customers
- Experience responding to and architecting for government RFPs/RFIs
- Active or eligible for a federal security clearance (or ability to obtain one)
- At least 3 years of direct security solution architecture experience (infrastructure, systems, application, or security solutions).
- Strong knowledge of Cyber Threat Intelligence (CTI), Incident Response, and Vulnerability Management, including frameworks such as MITRE ATT&CK, the Cyber Kill Chain, and the Diamond Model.
- Hands-on experience designing and implementing security automation and SOAR workflows for detection, investigation, and response.
- Experience developing automation in Python, including playbooks, REST API integrations, and scripting.
- Familiarity with the broader security ecosystem you’ll integrate with SIEM, EDR/XDR, UEBA, CMDB, NAC, and threat-intel enrichment sources (e.g., VirusTotal, Flashpoint, Intel471, Mandiant, Crowdstrike, and OSINT) and how data and actions move between them across cloud and SaaS environments.
- Strong grasp of enterprise network architecture, operating system concepts, and IT security fundamentals.
- Proven track of problem-solving in the cybersecurity domain, leveraging automation, and implementing industry-standard practices.
- Equally credible whiteboarding with a security engineer and presenting to the head of Client Success, CPO and CTO.
- A builder’s instinct: you’d rather show a working use case than describe one.
- Comfortable operating across the Product/field boundary and enabling others, not just executing solo.
- Certifications such as CISSP, CISM, Security+, or relevant platform-specific security certifications
- Strong executive presence; able to translate technical depth into business and mission outcomes
Preferred:
- Prior experience of managing and deploying SOC technologies at federal / SI
- Proven experience building AI-Agents for solving real-world Cybersecurity
- Existing relationships within DoD, civilian agencies, or SLTT security programs
- Cloud security certifications (AWS GovCloud) a plus
- Prior experience at a cybersecurity or SaaS vendor maintaining a FedRAMP-authorized environment through initial ATO and ongoing ConMon.
- AWS certifications such as Solutions Architect or DevOps Engineer Professional.
- Experience with container security scanning and software supply-chain security, including SBOM and image signing, in a government context.
- Familiarity with SOAR/TIP or broader cybersecurity product environments.
We’re a lean team, so your impact will be felt immediately. If this all sounds like a good fit for you, why not join us?
You’ll love working at Cyware because:
- We foster an exciting and challenging start-up culture.
- We’re not just employees. We’re people. We offer a comprehensive benefits package including time off, paid holidays, retirement plans, insurance coverage and much more.
- We’ll invest in your career. Our company is growing quickly and we will give you the opportunity to do the same. You will have access to a number of professional development opportunities so that you can keep up with the company’s evolving needs.
- We offer competitive compensation packages. We deeply value the talent our team brings to the table and believe that fair and equitable total compensation packages are part of our commitment to everyone who works here.
- We value diversity of people, culture, and ideas.
How to Apply
Apply right here. You’ve found the application!
EEO Statement:
Cyware is dedicated to hiring a diverse workplace that celebrates an inclusive culture and a sense of belonging. As an equal opportunity employer, we do not discriminate based on race, color, religion, sex (including pregnancy, gender identity, gender expression, and sexual orientation), national origin, age, veteran status, genetic information or disability.
Please note, all official communication regarding this position will only be conducted through email addresses ending in “@cyware.com”.
