Security Architect: Cloud Security & Threat Modeling Lead

Benevity; Vancouver; Hybrid; CAD 140,000 - 190,000; Full time

Benefits offered by this job

Flexible hybrid work

DEIB programs

Job summary

Benevity is seeking a Security Architect to design and implement security architectures across products, infrastructure, and operations. You will work cross‑functionally with engineering, IT, and compliance to define security best practices and mitigate threats, ensuring the resilience and trust of Benevity’s solutions.

You will lead threat modeling, risk assessments, and security reviews, while embedding security into the SDLC and collaborating with Product & Application Security teams.

Qualifications

• Bachelor’s or Master’s degree in Cybersecurity, Computer Science, or related field; substitution with relevant experience allowed
• 6–8+ years in security architecture, engineering, or operations with focus on architecture/design
• Cloud security expertise (AWS/GCP preferred)
• Strong IAM, encryption, firewall, SIEM tuning, and EDR knowledge
• Hands-on with IaC (Terraform) and DevSecOps practices
• Familiarity with MITRE ATT&CK, CIS Controls, Zero Trust; security frameworks awareness
• Experience with penetration testing, vulnerability assessments, and forensics
• Strong Python/PowerShell/Bash scripting and automation skills
• CISSP/CISM/CEH or AWS Security Specialty a plus

Responsibilities

• Design and implement secure architectures for apps, infra, and cloud environments (AWS/GCP); optimize for scalability, performance, cost
• Define secure design principles and patterns; provide expert guidance to engineering and architecture partners
• Represent Security in ADR/ARB processes; review security decisions and provide actionable guidance
• Perform security reviews of HLAs; collaborate with product/platform teams to close findings
• Conduct risk assessments and threat modeling for HLAs and major initiatives
• Embed security practices in the SDLC with Product & Application Security teams
• Drive security monitoring, logging, and incident detection capabilities
• Oversee vendor security architecture reviews and security tools integration
• Mentor engineering and security teams on best practices
• Ensure compliance with NIST, ISO 27001, SOC 2, GDPR

Skills

Security architecture

Cloud security (AWS/GCP)

IAM & encryption

SIEM tuning

EDR solutions

Container security (Docker/Kubernetes)

IaC (Terraform)

DevSecOps practices

MITRE ATT&CK

Zero Trust Architecture

Education

Bachelor’s or Master’s degree in Cybersecurity or CS

Tools

Docker

Kubernetes

Terraform

SIEM

EDR

Job description

Benevity is seeking a Security Architect to design and implement security architectures across products, infrastructure, and operations. You will work cross‑functionally with engineering, IT, and compliance to define security best practices and mitigate threats, ensuring the resilience and trust of Benevity’s solutions.

You will lead threat modeling, risk assessments, and security reviews, while embedding security into the SDLC and collaborating with Product & Application Security teams.