Senior Security Architect
Share
Job Location:
Salt Lake, UT - USA
Monthly Salary:
Not Disclosed
Posted on:
Yesterday
Vacancies:
1 Vacancy
Job Summary
About the Team:
Youll join the Product Security team and partner directly with Engineering (Development and SRE) to embed security into how we design develop deploy and operate software for Machine Identity Management (MIM).
About the Role:
As a Senior Security Architect in Product Security you will strengthen the security posture of MIM products and platforms by influencing design and development decisions from a security perspective. You will not own product or platform architecturebut you will help improve it through security best practices threat modeling and secure design patterns. Your focus is on enabling engineering teams to build secure resilient systems by design.
Responsibilities
- Partner with Engineering to integrate security throughout the SSDLC: threat modeling secure design reviews secure coding practices and CI/CD security controls.
- Provide security-focused guidance on product and platform designsensuring security principles are applied without disrupting innovation or ownership.
- Lead security initiatives that improve development processes and tooling (e.g. automated security checks Infrastructure-as-Code scanning secrets management).
- Define and maintain secure development standards patterns and guardrails for cloud-native and distributed systems.
- Conduct and guide threat modeling and security risk assessments for new features and architectures.
- Deliver security enablement: training mentoring and awareness sessions for engineers and security champions.
- Support incident response readiness for products and drive post-incident security improvements.
- Stay ahead of emerging threats and technologies updating security policies and practices accordingly.
- Collaborate on AI/ML security for safe model integration and data protection aligned with evolving standards.
#LI-Hybrid
#LI-HA1
Qualifications :
- 6 years in software development and 5 in security including 3 in a security architecture or technical leadership role.
- Strong engineering background with hands-on experience that informs secure design and threat modeling.
- Proven ability to partner with Engineering teams to embed security without slowing delivery.
- Deep knowledge of SSDLC secure coding and cloud security (AWS preferred).
- Experience with AI/ML security considerations.
- Expertise in threat modeling and secure design reviews (STRIDE PASTA or equivalent).
- Familiarity with frameworks like OWASP NIST CSA.
- Excellent communication and leadership skills; fluent in English.
- Practical experience with security tools and cloud-native technologies.
Preferred (Nice-to-have):
- Exposure to FedRAMP or similar compliance frameworks.
- Interest in sharing knowledge (e.g. blogs talks open source contributions).
- Familiarity with security testing and research techniques.
- Experience improving security maturity in Agile or DevSecOps environments.
- Passion for mentoring engineers in secure design and development.
Location & Work Setup
US-based within commuting distance of one of our offices: Boston MA; Salt Lake City UT; Santa Clara CA.
Expectation: 3 days in office per week.
Additional Information :
CyberArk is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race color religion creed sex sexual orientation gender identity national origin disability or protected Veteran status.
We are unable to sponsor or take over sponsorship of employment Visa at this time.
The salary range for this position is $150000 $220000/year plus commissions or discretionary bonus which will be based on the employees performance. Base pay may also vary considerably depending on job-related knowledge skills and experience. The compensation package includes a wide range of medical dental vision financial and other benefits.
Remote Work :
No
Employment Type :
Full-time
Key Skills
- Apache Hive
- S3
- Redshift
- Spark
- AWS
- Solr
- NoSQL
- Data Warehouse
- Internet Of Things
- Kafka
- DynamoDB
- ZooKeeper
About Company
CyberArk (NASDAQ: CYBR), is the global leader in Identity Security. Centered on privileged access management, CyberArk provides the most comprehensive security offering for any identity human or machine across business applications, distributed workforces, hybrid cloud workloads a ... View more
