Security Architect

This role is based in our Newton, MA office.We are seeking a strategic Security Architect to define and drive our cloud and enterprise security architecture. You will own the security architecture vision, establish governance frameworks, and partner with Product, Engineering, and Infrastructure teams to embed security throughout our technology ecosystem.Core ResponsibilitiesStrategic Architecture & GovernanceOwn and evolve the enterprise security architecture, including long-term roadmap and reference architectures for cloud, hybrid, and on-premises environmentsDefine organizational security principles, frameworks, and standards that align with business objectives and regulatory requirementsDevelop and present security strategy, roadmaps, and strategic initiatives to executive leadership and stakeholdersEstablish security metrics and KPIs to measure architecture effectiveness and communicate security posture to senior leadershipEnsure compliance with industry regulations and standards including ISO 27001, SOC 2, GDPR, and SOXLead security audits and assessments, driving remediation plans and continuous improvement initiativeCloud & Infrastructure SecurityOwn cloud security architecture across AWS and GCP, including Cloud Security Posture Management (CSPM), Cloud Infrastructure Entitlement Management (CIEM), and Wiz remediation strategiesDesign and implement Identity and Access Management (IAM) architecture based on least privilege principles and Zero Trust security modelsArchitect secure network segmentation strategies and defense-in-depth controls across all infrastructure layersOwn the architecture and strategic direction for key security platforms including SIEM, vulnerability management, endpoint security, and threat detection systemsManage and optimize internal security platforms to ensure robust protection of organizational assetsDesign secure cloud infrastructures and hybrid environment protections that scale with business growthConduct threat modeling and risk analyses to identify infrastructure vulnerabilities and recommend mitigation strategiesApplication & Development SecurityLead Secure Software Development Lifecycle (SDLC) and DevSecOps initiatives across the organizationIntegrate security controls into CI/CD pipelines, championing shift-left security practices in collaboration with DevOps leadershipEnsure software architecture and applications are designed to mitigate vulnerabilities and prevent exploitsProvide technical guidance and mentorship to development and DevOps teams on secure coding practices and emerging threatsCollaborate with cross-functional teams to embed security throughout the system development lifecycleDefine security requirements and controls that support agile development while maintaining strong security postureInnovation & Technical LeadershipLead security architecture for emerging technologies including AI/LLM initiatives, ensuring responsible and secure implementationServe as the technical authority on security architecture, advising on security-related technologies and assessing risks associated with proposed changesStay current with emerging security threats, vulnerabilities, and technologies to drive continuous innovation in security practicesInspire and influence engineering teams to execute security principles and adopt security-first mindsetsMentor and provide technical guidance to DevOps, operations, and development teams on security best practicesPartner strategically with Product, Engineering, and Infrastructure leaders to align security architecture with business innovationDrive thought leadership through security documentation, architecture diagrams, design specifications, and security control matricesAdditional ResponsibilitiesLead incident response management and develop security policies that protect organizational assets from cyber threatsIdentify organizational vulnerabilities and weaknesses through systematic security assessmentsRecommend and implement security controls and solutions that balance security requirements with business enablement