Staff Engineer - Cybersecurity Architect

Job description

## Hi, we’re Back Market. We’re here to help **make tech reliable, affordable, and better than new**. We're a global marketplace for refurbished devices, helping lower our collective environmental impact by providing trustworthy, affordable tech with 92% less carbon emissions than new. Yep, you read that right. Turns out refurbished tech is way better for the planet than new. In fact, With every device purchased on Back Market, our positive impact on the planet grows. From our Customer Care representatives to our software engineer, every individual at Back Market cuts the planet — and consumers — a break. **Our mission is simple: to do more with what we already have.** Are you ready to join us? As our Staff Engineer - Cybersecurity Architect, you will translate Back Market Cyber and IT strategy into a global Cybersecurity architecture by connecting the business processes with the application, data and infrastructure layers. Your ultimate goal is to design an organisation-wide secure architectural plan. You will play a crucial role in the digital transformation within Back Market. You will be the owner for the creation of architecture models that reflect the company's strategies and goals and take responsibility for securing the enterprise architecture within one or more domains. You'll be part of the Platform Dept which covers several squads, including about thirty people working on IT, GRC, SecOps, and other areas. **You will be the owner for the creation of architecture models that reflect the company's strategies and goals and take responsibility for securing the enterprise architecture within one or more domains.** You’ll do this by: - Analyzing business needs from an architectural point of view to translate them into performant and coherent ICT solutions - Developing, implementing, monitoring, evaluating and adjusting the architecture in order to have a coherent framework within projects and developments - Presenting and developing recommendations and translating them into executable roadmaps - Creating secure architecture patterns for complex and large technology environments together with stakeholders - Identifying and specifying implementation modalities of both existing and new technologies **You play a crucial role as a point of contact for both business and IT when it comes to Back Market ICT architecture.** You’ll do this by: - Providing guidance on enterprise architecture and systems processing in the data, application, integration, security and technology areas. - Promoting continuous improvement and development of methodologies used, among others. - Proposing improvements to optimise the functionality of the IT department with a view to cost efficiency, among other things. - Building a bridge between IT and business by advising management on complex ICT issues, ensuring decision-making. **You identify challenges and opportunities in collaboration with stakeholders to ensure the success of your projects.** You do this by: - Reconciling conflicting requirements and functions by finding appropriate technological solutions. - Facilitating and leading the substantive decision-making process within the project team. You define and follow the validation mechanisms. - You ensure that decisions on the projects are made on the basis of solid governance. - You keep abreast of evolutions and developments in IT architecture and relevant technologies. You estimate their usability and possibilities within the context of Back mMarket. In this way, you contribute to defining the future-oriented prevailing principles and frameworks. - Conduct technical risk analyses to identify, assess, and mitigate security risks across systems, applications, architectures, and technology initiatives, providing actionable recommendations aligned with security standards and business objectives. As a **Staff Engineer - Cybersecurity Architect** at Back Market, you will have a critical responsibility to enhance the security posture of Backmarket's entire IT landscape. You will be tasked with the following: - Collaborating closely with IT teams to integrate security best practices into both the design and implementation phases of IT projects. - Translate high-level security policies set by the GRC team into detailed technical solutions within project designs and IT changes. - Ensure that all new and existing IT projects are compliant with the latest security standards and practices. - Design and recommend security standards, security architecture principles and technical requirements. - Perform technical risk assessments and provide technical mitigations ## **What makes you the right profile for a** Staff Engineer - Cybersecurity Architect **?** - You have at least 10 years of experience within security and tech & you have previous enterprise security architecture experience - You breathe security architecture and get your satisfaction from delivering architectural deliverables. As a result, you inspire colleagues and fuel their drive - Your analytical mind enables you to understand the complex business model and associated systems. By applying secure architectural patterns, you achieve successful translation into designs and system requirements, among other things - You bring simplicity and transparency to communication, subordinating the complexity of the technical solutions to the target architecture - You are always attentive to technological developments and know how to translate them into business opportunities. By taking your advisory role within this position, you know how to convince management of the necessary evolutions - You keep in touch with the technical implementation aspects, making you an understanding interlocutor for the technical teams - You see documentation and communication as essential, so that the architecture is supported by the entire Back Market organisation **Requirements and qualifications** - In-depth knowledge of GCP cloud - Security by design/Zero trust/Defense in depth - IA security (MCP, Claude, Opencode, etc) - Security of MAC endpoints - Expertise in IAM (Okta) systems and standards. - Familiarity with compliance requirements and industry standards such as GDPR, ISO 27001, NIST frameworks. ## **Hiring Process** - Visio call to get to know you better by a TA - 45 min - Technical Interview - 60 min - Meet your team - 45 min - Stakeholder interview - 45 min - Meet the Staff community - 30 min - BM Values interview - 45 min ## **WHY SHOULD YOU JOIN US ? ✌🏼** At Back Market, we’re committed to hiring and supporting diverse teams of people from all backgrounds, experiences, and perspectives — it’s one of the reasons we’re such a high-scoring certified B Corp company (93.2). No matter your role and seniority level, you’ll enjoy impact-driven work with hands-on career development in an innovative, driven, and fast-paced environment — with benefits to match, like: - A mission driven work environment where your day to day makes an impact on the planet. Seriously. - Hybrid work environment, with 2 remote days a week and 1 remote work week per quarter, plus 3 flex days. - Employee Resource Groups, including mentorship programs, comprehensive accessibility policies, and cultural competency training. At Back Market, we strive to create a workplace that embodies the world we’re trying to change. We’ve embedded our diversity, equity, and inclusion principles into our DNA — from dedicated staff to employee resource groups to our company values. We know that the perfect background for a role doesn’t mean the perfect fit — we encourage you to apply for a role even if you think you may not have all the qualifications. If reasonable accommodations are needed for the interview process, please do not hesitate to discuss this with the Talent Acquisition Team.