Security Architect
位置：远程，美国类型：FTE,直接聘用 本职位位于软件工程，应用安全和基础设施架构的交叉点。安全建筑师将帮助定义系统如何设计，审查和保护整个组织，特别强调后端安全，云环境和安全开发实践。责任：· 定义并发展应用程序，服务和基础设施中的安全架构。· 与工程团队合作设计安全软件系统，特别关注后端和数据安全。· 开展威胁建模，风险评估，新系统和现有系统的架构审查和安全检查。· 建立并改善安全编码标准，开发实践和审核流程。· 与 DevOps 合作在云安全，容器安全，CI/CD 硬化和访问控制方面。· 评估和实施支持漏洞管理，代码扫描和事件响应的安全工具。· 在安全应用程序开发上提供技术指导和辅导。·监测出现的威胁，安全实践和相关标准。资格：· 10年以上软件工程或安全建筑角色经验。· 拥有深入的后端安全专业知识。· 与 Python,Go,C/C++,Rust 等语言经验。· 在金融科技，银行，数字资产或其他危险环境中设计或保护系统的经验证明。· 对加密技术，身份验证，授权和关键管理的强大知识。·与 AWS,GCP 等云安全平台实践经验。• 威胁建模，SDLC 安全实践以及 OWASP,NIST 或 ISO 27001等应用安全框架的经验。· 强大的沟通技能，能够向技术和非技术利益相关者解释技术风险和安全建议。· 与区块链或分布式账本技术的经验 （优先）. · 贡献开源安全项目或工具 （优先）. • CISSP, OSCP, CEH 等安全证书或相应 （优先）.最初发布在喜马拉雅山。
查看英文原文
Location: remote, US
Type: FTE, direct hire
This role sits at the intersection of software engineering, application security, and infrastructure architecture. The Security Architect will help define how systems are designed, reviewed, and protected across the organization, with particular emphasis on backend security, cloud environments, and secure development practices.
Responsibilities:
- Define and evolve security architecture across applications, services, and infrastructure.
- Partner with engineering teams to design secure software systems, with particular focus on backend and data security.
- Conduct threat modeling, risk assessments, architecture reviews, and security reviews for new and existing systems.
- Establish and improve secure coding standards, development practices, and review processes.
- Collaborate with DevOps on cloud security, container security, CI/CD hardening, and access controls.
- Evaluate and implement security tools supporting vulnerability management, code scanning, and incident response.
- Provide technical guidance and mentorship on secure application development.
- Monitor emerging threats, security practices, and relevant compliance standards.
Qualifications:
- 10+ years of experience in software engineering or security architecture roles.
- Strong full-stack engineering background with deep backend security expertise.
- Experience with languages such as Python, Go, C/C++, Rust, or similar.
- Demonstrated experience designing or securing systems in fintech, banking, digital assets, or other security-critical environments.
- Strong knowledge of cryptography, authentication, authorization, and key management.
- Hands-on experience with cloud security platforms such as AWS, GCP, or similar.
- Experience with threat modeling, secure SDLC practices, and application security frameworks such as OWASP, NIST, or ISO 27001.
- Strong communication skills with the ability to explain technical risks and security recommendations to both technical and non-technical stakeholders.
- Experience with blockchain or distributed ledger technologies (preferred).
- Contributions to open-source security projects or tooling (preferred).
- Security certifications such as CISSP, OSCP, CEH, or equivalent (preferred).
Originally posted on Himalayas