Cybersecurity Engineer/Architect

There is energy here…energy you can feel crackling at any of our international locations. It's an energy generated by enthusiasm for our work, for our teams, for our results, and for our customers. Lattice is a worldwide community of engineers, designers, and manufacturing operations specialists in partnership with world-class sales, marketing, and support teams, who are developing programmable logic solutions that are changing the industry. Our focus is on R&D, product innovation, and customer service, and to that focus, we bring total commitment and a keenly sharp competitive personality. Energy feeds on energy. If you flourish in a fast-paced, results-oriented environment, if you want to achieve individual success within a "team first" organization, and if you believe you can contribute and succeed in a demanding yet collegial atmosphere, then Lattice may well be just what you're looking for.

There is energy here…energy you can feel crackling at any of our international locations. It's an energy generated by enthusiasm for our work, for our teams, for our results, and for our customers. Lattice is a worldwide community of engineers, designers, and manufacturing operations specialists in partnership with world-class sales, marketing, and support teams, who are developing programmable logic solutions that are changing the industry. Our focus is on R&D, product innovation, and customer service, and to that focus, we bring total commitment and a keenly sharp competitive personality.

Energy feeds on energy. If you flourish in a fast-paced, results-oriented environment, if you want to achieve individual success within a "team first" organization, and if you believe you can contribute and succeed in a demanding yet collegial atmosphere, then Lattice may well be just what you're looking for.

Key Responsibilities:

• Configure and manage Microsoft 365 E5 Security features such as Defender for Office 365, Microsoft Purview DLP, Defender for Endpoint, and Microsoft Sentinel.
• Administer and secure Microsoft Entra ID (Azure AD), including MFA, Conditional Access, Privileged Identity Management (PIM), and Identity Protection.
• Operate and optimize vulnerability scanning tools, and coordinate remediation efforts with IT and DevOps teams.
• Deploy and manage endpoint detection and response solutions (e.g., Defender for Endpoint, CrowdStrike), and enforce endpoint hardening policies.
• Configure and monitor enterprise firewalls, VPNs, and network segmentation strategies.
• Implement and maintain Data Loss Prevention (DLP) policies across Microsoft 365, endpoints, and cloud services.
• Harden and monitor on-premises Active Directory environments, including GPOs, delegation, and auditing.
• Secure isolated R&D lab environments, enforce access controls, and monitor for anomalous activity.

• Bachelor's degree in Computer Science, Information Security, or a related field.
• Minimum of [Number] years of experience in cybersecurity, with a focus on the areas mentioned in the job title.
• Proven experience in architecting and implementing security solutions across multiple domains.
• Deep understanding of security principles, best practices, and relevant technologies.
• Strong knowledge of IAM concepts, protocols (SAML, OAuth, OpenID Connect), and solutions.
• Expertise in vulnerability management processes and tools.
• In-depth knowledge of cloud security best practices and platforms (AWS, Azure, GCP).
• Experience with application security testing methodologies and tools.
• Proficiency in securing endpoint and server environments.
• Understanding of API security principles and best practices.
• Familiarity with AI/ML concepts and emerging security considerations.
• Excellent analytical, problem-solving, and troubleshooting skills.
• Strong communication, presentation, and interpersonal skills.
• Ability to work independently and as part of a team.

• Relevant security certifications such as CISSP, CCSP, CEH, OSCP, AWS Certified Security – Specialty, Microsoft Certified: Azure Security Engineer Associate.
• Experience with security automation and orchestration tools.
• Knowledge of scripting languages (e.g., Python, PowerShell).
• Experience with threat modeling and risk assessment methodologies.
• Familiarity with security frameworks (e.g., NIST CSF, ISO 27001).