Security Architect

QuickBase•Remote US-MA, MA

3d•$184,264 - $289,558•Remote

About The Position

We are looking for a Security Architect to help shape and scale security across our products, cloud environments, applications, and emerging AI capabilities. This is a hands-on architecture role that sits at the intersection of Security, Engineering, Product, and Technology. The Security Architect will help teams move quickly while ensuring security is designed into solutions from the beginning—not added as a gate at the end. The right candidate combines strong technical depth with pragmatic risk judgment. You should be equally comfortable reviewing a new product architecture, discussing threat models with engineers, evaluating AI-generated code, identifying systemic security risks, and translating those risks into practical engineering guardrails.

Requirements

7+ years of experience across Security Engineering, Application Security, Product Security, Cloud Security, or Security Architecture.
Strong experience designing or reviewing modern SaaS and cloud-native architectures.
Deep understanding of application security concepts and common software vulnerabilities.
Experience with AWS or comparable public cloud platforms.
Strong knowledge of authentication, authorization, OAuth/OIDC, APIs, encryption, secrets management, and modern identity architectures.
Experience with threat modeling and secure design reviews.
Familiarity with AppSec technologies such as SAST, DAST, SCA, secrets scanning, CSPM/CNAPP, and CI/CD security controls.
Understanding of container, Kubernetes, serverless, and microservices security.
Ability to understand code and work effectively with software engineers; hands-on development experience is strongly preferred.
Working knowledge of AI/LLM security risks and emerging secure AI development practices.
Ability to translate technical security risks into clear business decisions and practical remediation.
Strong communication and collaboration skills with both engineers and senior leadership.

Nice To Haves

Experience securing enterprise SaaS products.
Experience building or scaling an Application Security or Product Security program.
Experience with tools such as GitHub Advanced Security, Wiz/Wiz Code, Snyk, Semgrep, Burp Suite, or comparable platforms.
Familiarity with OWASP Top 10, OWASP ASVS, MITRE ATT&CK, NIST, CIS, and common security architecture frameworks.
Experience with AI security, LLM applications, agentic architectures, or AI-assisted software development.
Relevant certifications such as CISSP, CSSLP, AWS Security Specialty, or equivalent are helpful but not required.

Responsibilities

Serve as the primary security architecture partner for Product, Engineering, Cloud, and Platform teams.
Lead security architecture reviews for new products, services, integrations, APIs, and major technology changes.
Drive Application Security architecture and strategy, including secure design, threat modeling, secure coding practices, and vulnerability prevention.
Partner with engineering teams to embed security into the software development lifecycle (SDLC) and CI/CD pipelines.
Review application and cloud architectures to identify security risks before systems reach production.
Establish reusable security patterns, standards, and guardrails that allow engineering teams to move faster without requiring security review for every decision.
Provide architectural guidance for identity, authentication, authorization, secrets management, encryption, API security, data protection, and service-to-service communication.
Help mature our approach to cloud-native security across AWS and SaaS environments.
Partner with engineering teams on remediation of critical and systemic vulnerabilities.
Evaluate security implications of AI-enabled products, AI-generated code, agents, LLM integrations, and emerging development technologies.
Work closely with Product Security, Security Operations, GRC, IT, Privacy, and Legal to ensure security architecture aligns with regulatory and customer requirements.
Support security assessments for acquisitions, strategic technology implementations, and third-party integrations.
Help define and measure security architecture and AppSec program effectiveness.
Threat modeling and secure design reviews.
Secure code and architecture reviews.
Software composition and dependency risk.
Secrets detection and credential management.
API and authentication security.
SAST, DAST, SCA, and developer security tooling.
Vulnerability prioritization and remediation guidance.
Secure-by-default development patterns.
Security of AI-generated and AI-assisted code.
Working directly with developers to reduce vulnerabilities at their source rather than relying solely on downstream detection.
Use AI-assisted capabilities to accelerate threat modeling, architecture analysis, code review, vulnerability triage, research, and documentation.
Help establish the controls required to ensure AI-generated software and AI-enabled product capabilities meet our security standards.
Help evolve our security architecture model toward automated guardrails, developer self-service, risk-based review, and security-by-design, allowing Security to scale alongside the business.