Senior Staff Product Security Architect

The role

You will design and improve security tooling, automation, and frameworks to enable enterprise teams to deliver secure applications. You will identify and eliminate security problems by shifting detection and prevention left into the development workflow.

What you will do

• Conceive, design, develop, and improve security tooling, automation, architecture, and frameworks.
• Identify and eliminate classes of security problems by shifting detection and prevention left.
• Provide actionable, technical security guidance to enterprise application and service teams.
• Ensure prioritization, resourcing, and timely delivery of work.
• Collaborate with cross-functional teams to ensure security work is prioritized.
• Drive end-to-end execution of technical security projects.
• Establish and report metrics to track compliance, program health, and risk posture.
• Coordinate with third-party vendors and auditors.
• Serve as a subject matter expert on infrastructure, architecture, and application security.
• Support security reviews, threat modeling, and incident response efforts.

Required qualifications

• 5+ years of experience in application security or security architecture, including leading cross-functional technical programs.
• Proficiency with secure SDLC processes and best practices.
• Hands-on experience designing and managing security controls within CI/CD pipelines.
• Familiarity with threat modeling, SAST/DAST, and SCA tools.
• Deep understanding of DevSecOps principles, security automation, and infrastructure-as-code security.
• Experience driving adoption of vulnerability management, architectural best practices, and incident response for cloud-native and distributed applications.
• Knowledge of container security (Docker, Kubernetes), microservices architectures, and cloud platform security (AWS, Azure, GCP).
• Experience leading end-to-end security architecture design and governance across complex, cloud-native, and hybrid enterprise environments.
• Ability to define and maintain reference architectures, security patterns, and control standards.
• Skilled in conducting architecture risk assessments and design reviews.

Benefits

• Generous employer match on employee 401(k) contributions
• Paid time off to volunteer at an organization of your choice
• Funding for select family-forming benefits
• Relocation support

About the company

The Chan Zuckerberg Initiative was founded in 2015 by Priscilla Chan and Mark Zuckerberg to harness the power of technology to pursue society's most ambitious goals. The organization includes flagship nonprofit organizations Biohub and Learning Commons.