Security Architect

The role

This person will strengthen and scale security architecture across the technology environment. They will shape secure design practices and help engineering teams build secure systems at scale.

What you will do

• Conduct security architecture reviews across cloud platforms, applications, infrastructure, identity systems, and enterprise technologies.
• Partner with Engineering, Product Security, Platform, and IT teams to incorporate security into system design and deployment workflows.
• Perform threat modeling and security design assessments for Web and Mobile applications, APIs, cloud services, and third-party integrations.
• Evaluate security controls across cloud and application environments.
• Develop and promote secure-by-default architecture patterns and reusable security controls.
• Translate security architecture requirements into automated guardrails and policy-as-code.
• Collaborate with Engineering teams to reduce repetitive manual security reviews.
• Assess the security implications of AI-assisted software development and emerging agentic technologies.
• Apply automation and AI-assisted analysis to improve architecture assessments and threat modeling.
• Review findings from penetration tests, vulnerability assessments, and incidents to identify systemic weaknesses.

Required qualifications

• 7+ years of experience in cloud security, application security, or security architecture.
• Demonstrated experience designing or evaluating secure systems.
• Strong technical expertise in cloud or application security architecture.
• Solid understanding of identity, infrastructure, and modern software development practices.
• Experience conducting security architecture reviews, threat modeling, and technical risk assessments for complex systems.
• Ability to independently identify architectural risks, evaluate design tradeoffs, and recommend practical, scalable security solutions.
• Experience developing or implementing security controls, automation, or secure engineering practices within modern technology environments.
• Ability to evaluate system designs, technical documentation, and implementation approaches to identify security weaknesses.
• Strong communication and collaboration skills.

Nice to have

• Hands-on software development, cloud engineering, or infrastructure engineering experience.
• Experience with secure-by-default architecture patterns, policy-as-code, or automated security controls.
• Familiarity with AI-assisted development, AI-enabled applications, or emerging agentic technologies and their security implications.
• Experience working across multiple security domains or contributing to enterprise security architecture initiatives.
• Familiarity with relevant security or regulatory frameworks (NIST, ISO 27001, SOC 2, HIPAA, PCI DSS) or professional security certifications.

Benefits

• Base salary
• Generous equity package

Before you apply

• Must be prepared to relocate to the Boston, MA office if necessary.
• Participates in E-verify to determine employment eligibility.

About the company

WHOOP provides wearable technology that provides personalized insights to help members understand their bodies and make decisions about training, recovery, and lifestyle.