Software Security / DevSecOps Architect
Core
Senior technical lead defining and advancing the organization's software security strategy from design through deployment and operation, establishing secure-by-design architecture and enabling engineering teams to integrate security controls.
Role type
Senior IC Software Security / DevSecOps Architect
Builds
Secure software supply chain, CI/CD pipelines, and enterprise security architecture for applications, services, and platforms.
Domain
Software Security, DevSecOps, Cloud Security, Supply Chain Security
Required skills
Secure-by-design architecture, Threat modeling, Software supply chain security, Cloud and container security, CI/CD and DevSecOps engineering, Security automation and policy-as-code, Vulnerability and risk management, Secure coding and developer enablement, Technical leadership and influence, Strategic planning and execution
Preferred skills
Executive communication, Regulatory compliance knowledge, Open-source governance
Technologies
CI/CD tools, Container platforms, Cloud services, Static/Dynamic analysis tools, SCA tools, IaC scanners, Policy-as-code frameworks
Responsibilities
Define and maintain enterprise software and DevSecOps security architecture; Lead threat modeling and attack-surface analysis; Establish security gates and release criteria; Design and implement scalable security capabilities within CI/CD workflows; Mentor security engineers and developers; Partner with product and engineering teams to embed security in the development lifecycle.
Seniority
Senior, hands-on IC with strategic influence