Security Architect

Description

This role is based in the company's Newton, MA office.

The company is looking for a strategic Security Architect to set the direction for cloud and enterprise security architecture. You will own the security architecture vision, build governance frameworks, and work with Product, Engineering, and Infrastructure teams to build security into every part of the technology stack.

The company is a B2B technology business with over 2000 colleagues across 19 offices. It runs more than 220 technology-focused websites and is listed on Nasdaq.

Responsibilities

• Own the enterprise security architecture, including the long-term roadmap and reference designs for cloud, hybrid, and on-premises environments.
• Set security principles, frameworks, and standards that fit business goals and regulatory obligations.
• Ensure compliance with ISO 27001, SOC 2, GDPR, SOX, and other industry regulations and standards.
• Lead security audits and assessments, then drive remediation plans and ongoing improvement.
• Build and present security strategy, roadmaps, and initiatives to executive leadership and stakeholders.
• Define security metrics and KPIs that measure architecture effectiveness and report security posture to senior leaders.
• Own cloud security architecture across AWS and GCP, including CSPM, CIEM, and Wiz remediation strategy.
• Design and implement IAM architecture based on least privilege and Zero Trust models.
• Design network segmentation and defense-in-depth controls across all infrastructure layers, including secure cloud and hybrid environments that scale with the business.
• Set the architecture and direction for SIEM, vulnerability management, endpoint security, and threat detection platforms, and manage and tune internal security platforms.
• Run threat modeling and risk analyses to find infrastructure weaknesses and recommend mitigations.
• Lead Secure SDLC and DevSecOps work across the organization, building security controls into CI/CD pipelines and pushing security earlier in development with DevOps leadership.
• Design software and applications to resist vulnerabilities and prevent exploits, and define security requirements that fit agile delivery.
• Mentor development, DevOps, and operations teams on secure coding and emerging threats.
• Lead security architecture for emerging technologies, including AI and LLM initiatives, to make sure they are implemented responsibly and securely.
• Act as the technical authority on security architecture, advise on security technologies, and assess the risk of proposed changes.
• Lead incident response and write security policies that protect company assets from cyber threats.
• Find weaknesses through systematic assessments and recommend and implement controls that support both security and business needs.
• Produce security documentation, architecture diagrams, design specifications, and control matrices, and partner with Product, Engineering, and Infrastructure leaders.

Requirements

• Bachelor's or master's degree in computer science, information technology, or a related field.
• 7+ years of cybersecurity experience, with deep cloud security expertise.
• A proven record of leading enterprise security architecture across multiple clouds.
• Deep knowledge of AWS and GCP security best practices.
• Working knowledge of organization policies, automated threat detection tools, central logging and SIEM practices, least privilege architecture, VPC design and perimeter controls, data exfiltration prevention, encryption and key management design, and IAM best practices.
• Expertise in finding and fixing web application vulnerabilities using OWASP and similar tools and methods.
• Skill in detecting and fixing network configuration and infrastructure vulnerabilities.
• Experience securing containers and Kubernetes, including Docker, with tools such as Trivy or Aqua Security.
• Familiarity with standard tools for vulnerability scanning, penetration testing, and security auditing.
• Ability to lead security discussions with system architects and business leaders.
• Strong analytical and computer skills.
• Expert understanding of cybersecurity and how it affects modern business.
• Solid knowledge of Unix operating systems.
• Awareness of NIST, COBIT, ISO, and SOC 2 frameworks.
• Certification in CISSP, CCSP, AWS Security Specialty, or Google Professional Cloud Security Engineer.

Conditions

The role is based in Newton, MA.

You will work in person with colleagues, customers, or partners at least three days a week, and can work from home or remotely the rest of the time.

The salary range is $175K-$200K per year, depending on experience.

The posting closes automatically on Nov 11, 2026.

The company is an equal opportunity employer and does not tolerate discrimination based on any protected characteristic.

Benefits

• Open vacation, 10 national holidays, and the option to work from almost anywhere for up to four weeks a year.
• Up to four paid days a year to volunteer with a philanthropic organization.
• Training, mentoring, and on-demand access to thousands of LinkedIn Learning courses, with support for internal moves.
• A 401k match, health, vision, and dental insurance, parental leave, and an ESPP offering company shares at a minimum 15% discount.
• Wellbeing support including an EAP, mental health first aiders, and a free wellness app.
• A welcoming culture with in-person and online social events, a charity day, colleague networks, and recognition through global awards and kudos programs.
• The chance to work with teams around the world.