Security Architect

Benevity is seeking a Security Architect to design and implement security architecture and controls across its products, infrastructure, and operations.

The ideal candidate has a strong technical background in security architecture, security operations, product security, infrastructure security, and engineering. You will work cross-functionally with engineering, IT, and compliance teams to define security best practices and mitigate threats.

Responsibilities:

• Secure Architecture Design and Implementation: Architect, design, and implement secure architectures for applications, infrastructure, and cloud environments (AWS and GCP preferred).
• Develop and maintain architectural blueprints and standards.
• Define and champion secure design principles, reusable patterns, and standards across products and infrastructure.
• Provide expert guidance on secure architecture best practices.
• Represent Security in the Architecture Decision Record (ADR) program and Architecture Review Board (ARB).
• Perform security reviews of High-Level Architecture (HLA) proposals.

Risk Assessment and Threat Modeling:

• Conduct risk assessments and threat modeling for products and infrastructure.
• Drive the adoption of security best practices and standards across the organization.
• Champion security initiatives and promote a security-conscious culture.
• Collaborate with product development and Product & Application Security teams to embed security into the SDLC.

Security Policy and Standards Development:

• Provide guidance on secure network, system, and cloud configurations.
• Implement security controls as code (e.g., Terraform) for cloud and edge protections.
• Conduct vendor security architecture reviews for technologies that affect Benevity’s security posture.
• Implement and oversee security monitoring, logging, and incident detection capabilities.

Requirements:

• Bachelor’s or Master’s degree in Cybersecurity, Computer Science, or a related field.
• 6–8+ years of experience in security architecture, security engineering, or security operations.
• Expertise in cloud security (AWS and GCP preferred).
• Strong knowledge of identity and access management (IAM), encryption, firewalls, SIEM tuning, and EDR solutions.
• Hands-on experience with container security (Docker, Kubernetes), infrastructure as code (e.g., Terraform), and DevSecOps practices.

Preferred Skills:

• Experience working in highly regulated industries.
• Strong understanding of AI security risks and securing AI-enabled systems and workflows.
• Experience with security automation and SOAR technologies.