Data Architect
Responsibilities:
Design the data architecture and data model for cybersecurity frameworks, scenarios, attack steps, evidence, and reporting
Establish a structured approach for ingesting and maintaining frameworks such as MITRE ATT&CK, MITRE ATLAS, OWASP LLM Top 10, OWASP Agentic Top 10, and DeTT&CT
Design data structures that support framework versions, baselines, provenance, historical records, and auditability
Develop approaches for identifying changes between framework versions and determining their impact on existing scenario and attack-step mappings
Design relationships between frameworks, techniques, scenarios, attack steps, evidence, and defensive use cases
Support analytics that distinguish framework coverage gaps from observability gaps
Define data structures and services that support authoritative datasets for cybersecurity reports and dashboards
Partner with backend engineers to implement APIs, data services, queries, and data exports
Establish data quality, validation, integrity, and testing standards
Ensure historical reporting remains reproducible and that framework updates do not silently overwrite historical data
Collaborate with cybersecurity, AI, architecture, and product stakeholders to translate requirements into technical solutions
Provide technical documentation and participate in architecture and schema design reviews
Qualifications:
Strong experience in data architecture and data modeling
Hands-on experience with MongoDB or other NoSQL/document databases
Experience designing data models for hierarchical, taxonomy-based, or highly connected data
Experience with Python and REST APIs, preferably FastAPI
Experience designing data services and APIs that support reporting and analytics
Strong understanding of data versioning, lineage, provenance, auditability, and historical data management
Experience with data validation, schema evolution, migrations, and automated testing
Experience working with containerized applications and modern CI/CD practices
Preferred Qualifications:
Cybersecurity frameworks such as MITRE ATT&CK, MITRE ATLAS, OWASP, or DeTT&CT
AI/ML, generative AI, or AI cybersecurity
Threat modeling, attack paths, security controls, or security assessment platforms
STIX/TAXII or other structured threat intelligence formats
AWS and cloud-based application architectures
Experience building data foundations that support analytics, dashboards, or reporting applications