Sr. Engineer, Information Security Architect

LOVESAC COMPANY•Stamford, CT

3d•$95,000 - $125,000•Remote

About The Position

The Information Security Architect and Sr. Engineer is a technical role responsible for designing, engineering, and evolving Lovesac’s information security architecture, platforms, and services while partnering closely with Enterprise Architecture, IT Operations, and technology teams across the organization. This role helps define the long-term security architecture vision, translates business and technology strategy into scalable security patterns and standards, and ensures information security capabilities are engineered and operated effectively as the business grows. This role balances strategic architecture leadership with hands-on engineering and platform execution. This role is also responsible for both the cyber department’s footprint, including security platforms, tooling, integrations, automation, and control patterns—and for advising and supporting secure design across enterprise solutions. Working alongside Enterprise Architects, IT, and application teams, this role embeds security into application, cloud, data, infrastructure, and platform designs early in the lifecycle while also ensuring those designs are implemented, maintained, and optimized in practice. The position plays a critical role in shaping Lovesac’s security posture by standardizing controls, reducing architectural and operational risk, and enabling consistent, defensible security decisions across the enterprise. This role ensures information security platforms are reliable, well-integrated, and aligned with approved designs, while helping Lovesac scale securely through a combination of strong architecture, disciplined engineering, and continuous improvement.

Requirements

Bachelor’s degree in information security, Computer Science, or related discipline (or equivalent experience) required.
CISSP, CISM, Security+, GCED, GCIH, or equivalent security certification; cloud, networking, or vendor-specific platform certifications required.
5-8 years of experience in security engineering or security operations roles.
Demonstrated experience designing and implementing security architectures for cloud, SaaS, enterprise, and distributed environments and hands-on experience administering security platforms such as SIEM, EDR, and vulnerability management tools.
Experience participating in or leading architecture and design review processes.
Strong background collaborating with enterprise architecture, IT, application, and security operations teams.
Experience supporting SOC operations and incident response tooling.
Familiarity with cloud and SaaS-based security platforms.
Familiarity with network operations and network security platforms.
Experience operating in an enterprise or distributed environment preferred.
Solid understanding of security architecture concepts, including Zero Trust, defense-in-depth, and secure-by-design.
Working knowledge of security monitoring, endpoint protection, and vulnerability management.
Experience with platform integration and API-based data ingestion.
Familiarity with automation and scripting (e.g., PowerShell, Python).
Ability to develop and implement approved architectural designs.
Experience operating in an enterprise or distributed environment preferred.
Ability to assess architectural risk and recommend appropriate controls.
Familiarity with security and privacy frameworks such as NIST CSF, ISO, HIPAA, GDPR, CCPA, COBIT, etc.
Exemplify each of our Lovesac values, at all times, be results driven and utilize knowledge to meet or exceed key performance indicators (KPIs), goals and deadlines.
Must be able to travel using various forms of transportation, as required by the Company in its sole discretion, for mandatory meetings and conferences held either at our offices or offsite (i.e. quarterly team connection weeks, companywide meetings and events, vendor visits).
Must comply with all policies and procedures outlined in the Lovesac Employee Handbook and work collaboratively with fellow employees, treating all clients, both internal and external with dignity and respect at all times.

Nice To Haves

Experience working with managed security service providers
Strong troubleshooting and operational problem-solving skills
Comfort working in an execution-driven role with defined priorities

Responsibilities

Define and evolve the enterprise security architecture vision and roadmap.
Establish security architecture principles aligned with Zero Trust and industry frameworks.
Create and maintain security reference architectures, design patterns, and implementation standards.
Design and engineer security capabilities that support business growth, cloud adoption, and omnichannel operations.
Evaluate emerging technologies and recommend secure, operationally viable architectural approaches.
Provide architectural and engineering input into security platform selection, capability development, and modernization efforts.
Engineer, configure, maintain, and optimize information security-owned platforms, including SIEM, SOAR, EDR, vulnerability management, EntraID, Data Loss Prevention, network security, AI security, and related security tools.
Perform routine platform administration, upgrades, health monitoring, and maintenance activities.
Ensure security platforms are properly configured, tuned, and operating in alignment with approved architectures and standards.
Troubleshoot platform issues and partner with vendors and internal teams to resolve incidents and service gaps.
Maintain configuration standards, technical documentation, and operational runbooks.
Support capacity planning, performance optimization, and long-term platform modernization initiatives.
Participate in enterprise architecture and solution design reviews for both cyber and non-cyber platforms.
Advise on secure design for applications, cloud services, data platforms, network-connected systems, and enterprise integrations.
Implement and maintain integrations between security platforms and enterprise systems.
Document data flows, trust boundaries, integration patterns, and security control placements.
Work with solution and application architects to balance security, usability, scalability, and operational effectiveness.
Ensure security requirements are clearly articulated, technically feasible, and consistently applied across projects.
Support automation and orchestration efforts to improve detection, response, and operational efficiency.
Assist with data ingestion, normalization, enrichment, and platform connectivity across security tooling.
Provide engineering support for Information Security department, including onboarding new detection use cases and response workflows.
Support incident response by ensuring platform data, integrations, and tooling are available and reliable.
Partner with threat intelligence, identity, ITSM, and incident response teams to operationalize new requirements.
Contribute to reducing manual effort through scripting, workflow integration, and response automation.
Develop and maintain security architecture standards, guidelines, and approved implementation patterns.
Support governance processes, including design reviews, exception handling, and technical evidence for audits and assessments.
Ensure architecture and engineering decisions align with internal policies and external regulatory requirements.
Identify architectural gaps, operational inefficiencies, technical debt, and improvement opportunities.
Partner closely with Enterprise Architects, Information Security team members, and other IT teams to align roadmaps and delivery priorities.
Continuously refine standards, platforms, and engineering practices based on threat evolution, business change, and operational lessons learned.

Benefits

Annual Bonus Program
Inaugural Grant Equity Awards
401K Matching Contribution
Financial Wellness Tools
Medical
Dental
Vision
Health Savings and Flexible Spending Accounts
Paid Parental Leave
Life/AD&D
Short Term and Long-Term Disability
Critical Illness and Accident Insurance
Employee Assistance Program
Up to 160 hours of paid time off within our fiscal calendar year, prorated from date of hire
8 paid company recognized holidays
Pet Insurance
generous Associate Discounts