Security Architect Lead

This is a fully remote position, open to applicants in Arizona, +13 more states.

📋 Description

• Drive customer interactions by executing security evaluations of web, mobile, API, cloud, and AI-enabled applications.

• Perform architecture and design assessments, threat modeling, secure code analysis, and penetration testing.

• Detect attack vectors, assess business risks, and propose security measures.

• Create security assessment documents that include findings, risk evaluations, and suggested remediation steps.

• Provide guidance to clients on remediation strategies, security best practices, and enhancing application and service security posture.

• Work alongside Professional Services to embed security within the software development lifecycle.

• Establish assessment methodologies, automation processes, and security tools.

• Outline technical security standards, reference architectures, and secure development protocols.

• Investigate emerging technologies, attack methodologies, and security weaknesses.

• Foster customer relationships through technical expertise and consultative interactions.

• Mentor upcoming team members while influencing PSSA methodologies and culture.

⛳️ Requirements

• Over 8 years of experience in Application Security, Product Security, or Security Consulting.

• Practical experience in conducting application security evaluations, encompassing architecture and design reviews, threat modeling, secure code reviews, penetration testing, and cloud security assessments.

• In-depth knowledge of application security vulnerabilities and secure development methodologies, including the OWASP Top 10, API Security Top 10, and prevalent attack techniques.

• Experience in evaluating web applications, APIs, microservices, containers, cloud-native environments, and AI-enabled applications.

• Proficient in communicating security findings, risks, and remediation strategies to both technical and executive audiences.

• Strong consulting capabilities with customers.

• Exceptional analytical, problem-solving, collaborative, written, and verbal communication abilities.

• Proficient in one or more programming or scripting languages such as Java, Python, JavaScript/TypeScript, Go, or C#.

• Bachelor's degree in Computer Science, Cybersecurity, Information Security, or a related technical discipline — or equivalent practical experience.

• Experience in assessing AI applications and agentic systems.

• Background in developing security automation, reusable assessment frameworks, or security tools.

• Familiarity with ISO 27001, SOC 2, PCI DSS, NIST CSF, and MITRE ATT&CK.

• Experience in defining and conveying prioritized remediation plans.

• Proven track record in mentoring security consultants or leading technical customer engagements.

🏝️ Benefits

• Time off programs.

• Medical insurance.

• Dental insurance.

• Vision insurance.

• Mental health support.

• Paid parental leave.

• Life insurance.

• Disability insurance.

• 401(k).

• Employee stock purchasing program.

• Certain roles may qualify for incentive compensation.

• Certain roles may qualify for equity.

• Reasonable accommodations during the application or recruitment process.