Security Architect

Benevity is seeking a Security Architect to design and implement security architecture and controls across its products, infrastructure, and operations. The ideal candidate has a strong technical background in security architecture, security operations, product security, infrastructure security, and engineering. You will work cross-functionally with engineering, IT, and compliance teams to define security best practices and mitigate threats. Responsibilities: Secure Architecture Design and Implementation: Architect, design, and implement secure architectures for applications, infrastructure, and cloud environments (AWS and GCP preferred). Develop and maintain architectural blueprints and standards. Define and champion secure design principles, reusable patterns, and standards across products and infrastructure. Provide expert guidance on secure architecture best practices. Represent Security in the Architecture Decision Record (ADR) program and Architecture Review Board (ARB). Perform security reviews of High-Level Architecture (HLA) proposals. Risk Assessment and Threat Modeling: Conduct risk assessments and threat modeling for products and infrastructure. Drive the adoption of security best practices and standards across the organization. Champion security initiatives and promote a security-conscious culture. Collaborate with product development and Product & Application Security teams to embed security into the SDLC. Security Policy and Standards Development: Provide guidance on secure network, system, and cloud configurations. Implement security controls as code (e.g., Terraform) for cloud and edge protections. Conduct vendor security architecture reviews for technologies that affect Benevity’s security posture. Implement and oversee security monitoring, logging, and incident detection capabilities. Requirements: Bachelor’s or Master’s degree in Cybersecurity, Computer Science, or a related field. 6–8+ years of experience in security architecture, security engineering, or security operations. Expertise in cloud security (AWS and GCP preferred). Strong knowledge of identity and access management (IAM), encryption, firewalls, SIEM tuning, and EDR solutions. Hands-on experience with container security (Docker, Kubernetes), infrastructure as code (e.g., Terraform), and DevSecOps practices. Preferred Skills: Experience working in highly regulated industries. Strong understanding of AI security risks and securing AI-enabled systems and workflows. Experience with security automation and SOAR technologies. Job Data by YubHub .