Security Architect

AppsFlyer's Security team is seeking a Security Architect to drive cross-PR&D security alignment, lead complex security design reviews, and shape the security architecture of our strategic cross-technology initiatives.

This role serves as the senior technical security authority across our R&D ecosystem, partnering with product, platform, and infrastructure teams to embed security into every layer of our Secure Software Development Lifecycle (SSDLC) and to guide AppsFlyer toward a robust, modern, and secure architecture.

The ideal candidate is highly professional, demonstrates a 'can-do' attitude, and brings the seniority and presence to engage R&D architects and senior stakeholders as a peer.

Responsibilities:

• Drive cross-PR&D alignment of the Secure Software Development Lifecycle (SSDLC), establishing consistent standards, controls, and practices across all engineering groups.
• Lead complex security design reviews for new technologies, systems, services, and strategic cross-tech initiatives.
• Define and own the security architecture for high-impact cross-team initiatives, ensuring security is embedded from the earliest design stages.
• Serve as the security counterpart to PR&D architects, representing security in architecture forums, design discussions, and strategic technology decisions.
• Partner with DevOps, Infrastructure, Platform, and R&D teams to integrate security into CI/CD pipelines, infrastructure-as-code, and shared platform services.
• Perform threat modeling and architectural risk assessments to identify and mitigate weaknesses before they reach production.
• Develop and maintain security guidelines, reference architectures, and best practices that scale across the organization.
• Evaluate and recommend security tools and technologies to continuously strengthen AppsFlyer's security posture.
• Stay current on emerging threats, vulnerabilities, and architectural patterns, translating them into actionable improvements to our security strategy.

Requirements:

• 7+ years of experience in security architecture, cloud/infrastructure security, application security, or DevSecOps roles.
• Proven experience leading security design reviews and architecture work across multiple R&D teams or domains.
• Strong understanding of SSDLC practices and how to scale them across a large engineering organization.
• Deep knowledge of cloud-native architecture and services (AWS, GCP).
• Hands-on experience securing CI/CD pipelines, containers, and infrastructure-as-code (e.g., Terraform, Kubernetes).
• Deep knowledge of network and identity security concepts, such as zero trust, IAM, and secrets management.
• Proven experience working with product and R&D teams performing architecture.
• Experience working in a SaaS product company at scale.
• Excellent communication skills, with the ability to translate complex technical risks into clear business impact and to influence senior R&D stakeholders.
• A proactive mindset, strong problem-solving ability, and a passion for designing secure, scalable systems.
• Strong collaboration skills and the ability to drive change across cross-functional teams.

Bonus Points:

• Experience in high-scale distributed SaaS environments.
• Certifications such as GCP or AWS Certified Security Specialty, OSCP or OSWE.
• Being introduced by an AppsFlyer team member.