We are seeking a
Security Architect to design and implement security architecture and controls across our products, infrastructure, and operations. The ideal candidate has a strong technical background in security architecture, security operations, product security, infrastructure security, and engineering. You will work cross-functionally with engineering, IT, and compliance teams to define security best practices and mitigate threats. This role supports Benevity's mission to power purpose-driven businesses by securing the technology that enables companies to engage in social good and corporate giving. Additionally, you will play a critical role in ensuring the security resilience and trust of our products and services, safeguarding the integrity and reliability of the solutions we provide.
What you'll do:Secure Architecture Design and Implementation:
- Architect, design, and implement secure architectures for applications, infrastructure, and cloud environments (AWS and GCP preferred), considering scalability, performance, and cost optimization. Develop and maintain architectural blueprints and standards
- Define and champion secure design principles, reusable patterns, and standards across products and infrastructure. Provide expert guidance on secure architecture best practices
- Represent Security in the Architecture Decision Record (ADR) program and Architecture Review Board (ARB), reviewing security-relevant decisions and providing clear, actionable guidance to engineering and architecture partners
- Perform security reviews of High-Level Architecture (HLA) proposals, including threat considerations and control recommendations, and partner with product and platform teams to close findings
Risk Assessment and Threat Modeling:
- Conduct risk assessments and threat modeling for products and infrastructure, including for new and changing HLAs and major architectural initiatives
- Drive the adoption of security best practices and standards across the organization
- Champion security initiatives and promote a security-conscious culture
- Collaborate with product development and Product & Application Security teams to embed security into the SDLC (Software Development Lifecycle)
- Support technical security incident response efforts, including investigation, containment, and remediation
Security Policy and Standards Development
- Provide guidance on secure network, system, and cloud configurations
- Implement security controls as code (e.g., Terraform and related IaC) for cloud and edge protections such as WAF, in partnership with platform and DevOps teams
- Conduct vendor security architecture reviews for technologies that affect Benevity's security posture
- Implement and oversee security monitoring, logging, and incident detection capabilities
- Evaluate and integrate security tools for endpoint, application, and cloud security
- Ensure compliance with industry regulations and standards such as NIST, ISO 27001, SOC 2, and GDPR
- Train and mentor engineering teams, and provide technical mentoring to the security team, on security best practices
- Develop and maintain security architecture standards, technical guidelines, and related procedures, integrating them seamlessly within the overall security architecture and aligning with industry best practices and regulatory requirements
What you'll bring:- Bachelor's or Master's degree in Cybersecurity, Computer Science, or a related field, can be substituted with relevant experience
- 6-8+ years of experience in security architecture, security engineering, or security operations, with a focus on architecture and design. Demonstrable experience mentoring engineers and security peers
- Expertise in cloud security (AWS and GCP preferred; familiarity with other major clouds a plus)
- Strong knowledge of identity and access management (IAM), encryption, firewalls, SIEM tuning, and EDR solutions
- Hands-on experience with container security (Docker, Kubernetes), infrastructure as code (e.g., Terraform), and DevSecOps practices
- Proficiency in security frameworks such as MITRE ATT&CK, CIS Controls, and Zero Trust Architecture
- Familiarity with penetration testing, vulnerability assessments, and forensics
- Strong scripting and automation skills in Python, PowerShell, or Bash
- Certifications such as CISSP, CISM, CEH, or AWS Security Specialty are a plus
Preferred Skills:- Experience working in highly regulated industries (e.g., finance, healthcare, government)
- Strong understanding of AI security risks and securing AI-enabled systems and workflows
- Experience with security automation and SOAR technologies, including SIEM tuning and response workflows
