About the role

Requirements:

Bachelor's degree in computer engineering, cybersecurity, or a related field.
Master's degree preferred.
Typically 12+ years of related experience, including at least 6 years of experience in a security role, 3 years of experience in a defensive application security role and working directly with software engineering teams, and 3 years of work experience as a security architect.
Experience designing and reviewing secure application and API architectures, including threat modeling.
Experience driving the implementation of application security tooling (SAST, DAST, SCA, API security, secrets management).
Experience integrating security into CI/CD pipelines and developer workflows.
Experience with cloud-native application architectures (e. g., microservices, Kubernetes) as they relate to application security.
Experience presenting and influencing at the engineering leadership and executive level.
Experience working effectively within a globally distributed organization, collaborating across time zones, cultures, and functional teams to drive consistent security outcomes.

Skills and Abilities:

Practical knowledge of control frameworks such as the NIST CSF, Center for Internet Security's Critical Security Controls (v8), OWASP SAMM, ASVS, and Top 10
Practical knowledge of the MITRE Adversarial Tactics, Techniques, and Common Knowledge (ATT& CK) framework.
Knowledge of identity, authentication, authorization, and secure API design.
Strong risk management mindset with the ability to balance security and business outcomes.
Ability to communicate complex technical concepts to non-technical audiences.
Excellent problem-solving, analytical, and collaboration skills.
Demonstrated commitment to ethical standards and a diverse, inclusive workplace.

Licenses and Certifications:

At least one certification related to application security or secure development (e. g., CSSLP, GWEB, CASE).
General cloud or Kubernetes security certification preferred (e. g., CKS, CCSK, CCSP, GCSA).
General security certification preferred (e. g., CISSP, GIAC).
General security architecture certification preferred (e. g., SABSA SCF, ISSAP).
Cloud and container certifications are preferred but are not the primary focus.

Security Architect