Sr Product Security Architect
About The Position
Datavant is seeking a Sr Product Security Architect to shape the security posture of its products. The role leads secure architecture and design reviews across the application portfolio, embedding security throughout the software development lifecycle. Working closely with engineering teams, product leadership, and compliance stakeholders, the architect provides risk mitigation guidance, actionable security recommendations, and practical technical controls for regulatory and compliance requirements. The position combines secure code review and broad system architecture assessment with threat modeling, security architecture expertise, and ownership of security improvement projects. It also contributes to quarterly planning by prioritizing security requests and documenting clear, enabling security processes. The role calls for a delivery-focused partner to engineering teams who can balance ideal security with practical constraints, including those of legacy systems.
Requirements
- Hands-on experience developing in multiple programming languages and the ability to adapt quickly to new technologies.
- Deep understanding of application and cloud security, applied to architectural reviews and contributions to development teams.
- Strong understanding of security controls in audit standards and practical controls for reducing risk in application development environments and AWS and/or Azure.
- Ability to balance ideal security with what is necessary to appropriately secure legacy systems.
- Delivery-focused approach and ability to succeed in a fast-paced environment, partnering with and enabling engineering teams.
- At least 6 years of experience in architecture and threat modeling reviews.
- At least 6 years of experience working with compliance standards and applying them practically with low friction.
- Proficiency in using AI tooling to optimize work efficiency and workflows.
- Knowledge of AI platforms, AI/MCP (Model Context Protocol), and Model Gateways.
Nice To Haves
- Experience with security in healthcare or another highly regulated space, such as operational experience with HIPAA, HITRUST, SOC 2, PCI, or FedRAMP.
Responsibilities
- Review development projects, including conducting secure code reviews and assessing system architecture.
- Provide control feedback and practical risk-management guidance to development teams.
- Own and conduct security and threat model reviews and advise on security architecture.
- Lead security improvement projects as a deep technical contributor, collaborating with others to ensure success.
- Help facilitate quarterly planning by strategically prioritizing security-related requests, including architectural feedback, vulnerability remediation, and compliance control implementation.
- Write clear security control descriptions and process documentation that enables development teams to work effectively.
- Translate regulatory and compliance requirements into practical technical controls.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
Education Level
No Education Listed
