Application Security Architect

ninjaone; Brasil; Remote; BRL 180,000 - 280,000; Full time

Benefits offered by this job

Flexible hours

Home office

Training platform

Global team

Job summary

NinjaOne is seeking an Application Security Architect to join the core Information Security group. You will influence security across design, development, and deployment, mentoring teams and driving secure practices for thousands of customers.

The role blends hands-on software security with architectural leadership, spanning application, cloud, and identity layers. You will lead reviews and guide security maturity across the organization.

Qualifications

• 5+ years of software security experience, including 2+ years in security architecture or offensive security roles.
• Proficiency in Java, Kotlin, or C++ and solid understanding of app security fundamentals.
• Experience with security frameworks and methodologies (OWASP, NIST, BSIMM, STRIDE, DREAD).
• Hands-on identity management tech (OAuth 2.0, SAML, OIDC) and cloud security in AWS.
• Experience with modern delivery tech including IaC and CI/CD pipelines.
• Linux and Windows security knowledge; security testing tooling experience.

Responsibilities

• Review system designs and source code for security and architectural risks.
• Lead threat modeling, secure design reviews, and architecture sessions with engineering teams.
• Drive AI-assisted security workflows from PoC to operational maturity.
• Develop and present reports for technical and executive audiences.
• Document security architectures, policies, and best practices.
• Mentor security teammates and promote secure design practices across the org.

Skills

Java

Kotlin

C++

Education

Bachelor's degree in Computer Science/IT

Tools

OWASP

NIST

BSIMM

STRIDE

DREAD

OAuth 2.0

SAML

OIDC

AWS

IaC

CI/CD

Job description

About the Role

The Application Security Architect role is pivotal to the NinjaOne team, with company-wide visibility spanning individual developers through executive leadership. As part of NinjaOne's core Information Security organization, you will directly contribute to the security, privacy, reliability, and user experience of more than 6,000 customers across MSP and enterprise IT environments.

This is a highly technical, architecture-focused role blending hands-on software security and secure design principles. Ideally, you have a solid background in both software engineering and security. You will work across application, cloud, infrastructure, and identity layers to embed security into NinjaOne's software and systems from design through deployment.

Working closely with engineering, platform, and product teams, you will lead code reviews, secure design and architecture reviews, anticipate emerging threats, and help drive scalable, resilient, and compliant security solutions. You will also serve as a security mentor to engineering teams, helping raise overall security maturity across the organization.

English Resume Required.

Location: We are flexible on remote working from home, but you must be located in Brazil, Colombia, Ecuador, or Mexico.

What You'll Be Doing

• Partner with engineering teams to review system designs and source code for security and architectural risks
• Lead threat modeling, secure design reviews, and architecture review sessions with engineering teams
• Execute and help improve our AI-assisted workflows for product security
• Define and guide security initiatives from proof-of-concept through operational maturity
• Develop clear reports and presentations for technical and executive audiences
• Document security architectures, policies, and best practices
• Mentor and provide technical guidance to other security team members
• Promote a culture of security awareness across the organization, driving and evolving the Security Champions program to foster shared ownership of secure design practices

About You

• 5+ years of experience in software security, including 2+ years in security architecture or offensive security roles
• Proficiency in one or more programming languages: Java, Kotlin, C++
• Strong understanding of application security fundamentals, including authentication, authorization, cryptography, and secure communications
• Experience with security frameworks and methodologies such as OWASP, NIST, BSIMM, STRIDE, and DREAD
• Hands-on experience with identity and access management technologies (OAuth 2.0, SAML, OIDC)
• Knowledge of cloud security in AWS environments
• Experience with modern delivery technologies, including IaC and CI/CD pipelines
• Solid understanding of Linux and Windows security in enterprise environments
• Experience with security testing and common security tooling
• Excellent communication, analytical, and problem-solving skills

Education & Certifications

• Bachelor's degree in Computer Science, Information Technology, or a related field (or equivalent practical experience)
• Relevant certifications such as OSCP, OSWE, or SecurityX are preferred but not required

About Us

NinjaOne automates the hardest parts of IT to deliver visibility, security, and control over all endpoints for more than 40,000 customers. The NinjaOne automated endpoint management platform is proven to increase productivity, reduce security risk, and lower costs for IT teams and managed service providers. NinjaOne is obsessed with customer success and provides free and unlimited onboarding, training, and support. NinjaOne is #1 on G2 in endpoint management, patch management, remote monitoring and management, and mobile device management.

What You'll Love

• Flexible working hours with home office options that help you balance your personal life and your job
• Grow personally and together with one of the fastest growing companies globally
• Develop your skills through our renowned training platform
• Receive competitive compensation
• Collaborate with an amazing international workforce

Additional Information

This position is NOT eligible for Visa sponsorship.

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, genetic information, marital status, veteran status, or any other status protected by applicable law. We are committed to providing an inclusive and diverse work environment.