Senior Software Security Architect

This is a fully remote position, open to applicants in Wisconsin.

📋 Description

• Oversee the DevSecOps function by setting and implementing its technical strategy, roadmap, and key priorities.

• Create secure architecture and engineering standards by assessing system designs, defining reusable security patterns, and enhancing threat modeling practices.

• Integrate security into software development through secure coding practices, providing developer guidance, detecting secrets, and facilitating reusable automation.

• Incorporate SAST, SCA, DAST, and infrastructure-as-code scanning within CI/CD pipelines.

• Enhance software supply chain security throughout build pipelines, artifact repositories, access management, secrets protection, and software integrity.

• Design and implement security capabilities for cloud, container, and infrastructure environments.

• Lead efforts to remediate application and platform security risks in collaboration with engineering and operations teams.

• Integrate security into production operations by improving logging, monitoring, detection, and incident response protocols.

• Establish DevSecOps metrics to measure security coverage, tool adoption, remediation progress, and control effectiveness.

• Develop technical capability by assessing security technologies, mentoring engineers, guiding assigned resources, and supporting security champions.

• Collaborate with engineering, technology, and security teams to create secure architectures, enhance automation, and achieve measurable security improvements.

• Provide technical guidance along with limited supervisory support.

⛳️ Requirements

• Bachelor's degree in Computer Science, Engineering, Information Security, or a related field.

• Over 10 years of progressive experience in information security, software engineering, platform engineering, or DevSecOps, demonstrating technical leadership in complex security engineering projects.

• Extensive knowledge of the software development lifecycle, including secure architecture, application security, automated testing, build and release processes, cloud security, and production operations.

• Practical experience in designing and implementing security automation, integrating security testing tools into CI/CD pipelines, and securing cloud-native applications, containers, and infrastructure environments.

• Proven track record in establishing DevSecOps roadmaps, technical standards, and security capabilities that enhance engineering practices, mitigate risks, and yield measurable business outcomes.

• Strong understanding of software supply chain security, secure development practices, threat modeling, vulnerability remediation, and risk-based security controls.

• Capability to independently tackle complex technical challenges, assess security trade-offs, and influence engineering decisions across various teams.

• Demonstrated proficiency in communicating complex security risks, guiding technical teams, mentoring engineers, and coordinating cross-functional initiatives to achieve sustainable security improvements.

• Possession of CISSP, CCSP, GIAC, or relevant cloud and DevSecOps certifications; experience in securing AI/ML and generative AI solutions is preferred.

• Position to be performed at the specified location.

🏝️ Benefits

• Generous benefits package available.