Senior Security Architect

About CyberArk:
CyberArk (NASDAQ: CYBR), is the global leader in Identity Security. Centered on privileged access management, CyberArk provides the most comprehensive security offering for any identity – human or machine – across business applications, distributed workforces, hybrid cloud workloads and throughout the DevOps lifecycle. The world’s leading organizations trust CyberArk to help secure their most critical assets. To learn more about CyberArk, visit our CyberArk blogs or follow us on X, LinkedIn or Facebook.

About the Team:

You’ll join the Product Security team and partner directly with Engineering (Development and SRE) to embed security into how we design, develop, deploy, and operate software for Machine Identity Management (MIM).

About the Role:

As a Senior Security Architect in Product Security, you will strengthen the security posture of MIM products and platforms by influencing design and development decisions from a security perspective. You will not own product or platform architecture—but you will help improve it through security best practices, threat modeling, and secure design patterns. Your focus is on enabling engineering teams to build secure, resilient systems by design.

Responsibilities

• Partner with Engineering to integrate security throughout the SSDLC: threat modeling, secure design reviews, secure coding practices, and CI/CD security controls.
• Provide security-focused guidance on product and platform designs—ensuring security principles are applied without disrupting innovation or ownership.
• Lead security initiatives that improve development processes and tooling (e.g., automated security checks, Infrastructure-as-Code scanning, secrets management).
• Define and maintain secure development standards, patterns, and guardrails for cloud-native and distributed systems.
• Conduct and guide threat modeling and security risk assessments for new features and architectures.
• Deliver security enablement: training, mentoring, and awareness sessions for engineers and security champions.
• Support incident response readiness for products and drive post-incident security improvements.
• Stay ahead of emerging threats and technologies, updating security policies and practices accordingly.
• Collaborate on AI/ML security for safe model integration and data protection aligned with evolving standards.

#LI-Hybrid
#LI-HA1

• 6 years in software development and 5 in security, including 3 in a security architecture or technical leadership role.
• Strong engineering background with hands-on experience that informs secure design and threat modeling.
• Proven ability to partner with Engineering teams to embed security without slowing delivery.
• Deep knowledge of SSDLC, secure coding, and cloud security (AWS preferred).
• Experience with AI/ML security considerations.
• Expertise in threat modeling and secure design reviews (STRIDE, PASTA, or equivalent).
• Familiarity with frameworks like OWASP, NIST, CSA.
• Excellent communication and leadership skills; fluent in English.
• Practical experience with security tools and cloud-native technologies.

Preferred (Nice-to-have):

• Exposure to FedRAMP or similar compliance frameworks.
• Interest in sharing knowledge (e.g., blogs, talks, open source contributions).
• Familiarity with security testing and research techniques.
• Experience improving security maturity in Agile or DevSecOps environments.
• Passion for mentoring engineers in secure design and development.

Location & Work Setup

US-based, within commuting distance of one of our offices: Boston, MA; Salt Lake City, UT; Santa Clara, CA.

Expectation: 3 days in office per week.

CyberArk is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, creed, sex, sexual orientation, gender identity, national origin, disability, or protected Veteran status.

We are unable to sponsor or take over sponsorship of employment Visa at this time.

The salary range for this position is $150,000 – $220,000/year, plus commissions or discretionary bonus, which will be based on the employee’s performance. Base pay may also vary considerably depending on job-related knowledge, skills, and experience. The compensation package includes a wide range of medical, dental, vision, financial, and other benefits.