# Security Architect

**Company**: AppsFlyer
**Location**: Herzliya
**Experience**: senior
**Job type**: full-time
**Category**: Security
**Industry**: Technology

**Apply**: https://job-boards.greenhouse.io/appsflyer/jobs/8622261002?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/job/security-architect-6803982a-29a/

## Description

AppsFlyer's Security team is seeking a Security Architect to drive cross-PR&D security alignment, lead complex security design reviews, and shape the security architecture of our strategic cross-technology initiatives.

This role serves as the senior technical security authority across our R&D ecosystem, partnering with product, platform, and infrastructure teams to embed security into every layer of our Secure Software Development Lifecycle (SSDLC) and to guide AppsFlyer toward a robust, modern, and secure architecture.

The ideal candidate is highly professional, demonstrates a 'can-do' attitude, and brings the seniority and presence to engage R&D architects and senior stakeholders as a peer.

Responsibilities:

- Drive cross-PR&D alignment of the Secure Software Development Lifecycle (SSDLC), establishing consistent standards, controls, and practices across all engineering groups.

- Lead complex security design reviews for new technologies, systems, services, and strategic cross-tech initiatives.

- Define and own the security architecture for high-impact cross-team initiatives, ensuring security is embedded from the earliest design stages.

- Serve as the security counterpart to PR&D architects, representing security in architecture forums, design discussions, and strategic technology decisions.

- Partner with DevOps, Infrastructure, Platform, and R&D teams to integrate security into CI/CD pipelines, infrastructure-as-code, and shared platform services.

- Perform threat modeling and architectural risk assessments to identify and mitigate weaknesses before they reach production.

- Develop and maintain security guidelines, reference architectures, and best practices that scale across the organization.

- Evaluate and recommend security tools and technologies to continuously strengthen AppsFlyer's security posture.

- Stay current on emerging threats, vulnerabilities, and architectural patterns, translating them into actionable improvements to our security strategy.

Requirements:

- 7+ years of experience in security architecture, cloud/infrastructure security, application security, or DevSecOps roles.

- Proven experience leading security design reviews and architecture work across multiple R&D teams or domains.

- Strong understanding of SSDLC practices and how to scale them across a large engineering organization.

- Deep knowledge of cloud-native architecture and services (AWS, GCP).

- Hands-on experience securing CI/CD pipelines, containers, and infrastructure-as-code (e.g., Terraform, Kubernetes).

- Deep knowledge of network and identity security concepts, such as zero trust, IAM, and secrets management.

- Proven experience working with product and R&D teams performing architecture.

- Experience working in a SaaS product company at scale.

- Excellent communication skills, with the ability to translate complex technical risks into clear business impact and to influence senior R&D stakeholders.

- A proactive mindset, strong problem-solving ability, and a passion for designing secure, scalable systems.

- Strong collaboration skills and the ability to drive change across cross-functional teams.

Bonus Points:

- Experience in high-scale distributed SaaS environments.

- Certifications such as GCP or AWS Certified Security Specialty, OSCP or OSWE.

- Being introduced by an AppsFlyer team member.

For more fresh new jobs, check out [yubhub.co](https://yubhub.co/).

## Skills

### Required
- security architecture
- cloud/infrastructure security
- application security
- DevSecOps
- SSDLC
- cloud-native architecture
- AWS
- GCP
- CI/CD pipelines
- infrastructure-as-code
- Terraform
- Kubernetes
- network security
- identity security
- zero trust
- IAM
- secrets management

### Nice to have
- high-scale distributed SaaS environments
- GCP or AWS Certified Security Specialty
- OSCP
- OSWE

---

Source: [Apply at job-boards.greenhouse.io](https://job-boards.greenhouse.io/appsflyer/jobs/8622261002?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)