Security Architect

Requirements:

• Bachelor's degree in computer engineering, cybersecurity, or a related field.
• Master's degree preferred.
• Typically 12+ years of related experience, including at least 6 years of experience in a security role, 3 years of experience in a defensive application security role and working directly with software engineering teams, and 3 years of work experience as a security architect.
• Experience designing and reviewing secure application and API architectures, including threat modeling.
• Experience driving the implementation of application security tooling (SAST, DAST, SCA, API security, secrets management).
• Experience integrating security into CI/CD pipelines and developer workflows.
• Experience with cloud-native application architectures (e. g., microservices, Kubernetes) as they relate to application security.
• Experience presenting and influencing at the engineering leadership and executive level.
• Experience working effectively within a globally distributed organization, collaborating across time zones, cultures, and functional teams to drive consistent security outcomes.

Skills and Abilities:

• Practical knowledge of control frameworks such as the NIST CSF, Center for Internet Security's Critical Security Controls (v8), OWASP SAMM, ASVS, and Top 10
• Practical knowledge of the MITRE Adversarial Tactics, Techniques, and Common Knowledge (ATT& CK) framework.
• Knowledge of identity, authentication, authorization, and secure API design.
• Strong risk management mindset with the ability to balance security and business outcomes.
• Ability to communicate complex technical concepts to non-technical audiences.
• Excellent problem-solving, analytical, and collaboration skills.
• Demonstrated commitment to ethical standards and a diverse, inclusive workplace.

Licenses and Certifications:

• At least one certification related to application security or secure development (e. g., CSSLP, GWEB, CASE).
• General cloud or Kubernetes security certification preferred (e. g., CKS, CCSK, CCSP, GCSA).
• General security certification preferred (e. g., CISSP, GIAC).
• General security architecture certification preferred (e. g., SABSA SCF, ISSAP).
• Cloud and container certifications are preferred but are not the primary focus.