Application Security Architect

NinjaOne; North Carolina; Hybrid; USD 140,000 - 180,000; Full time

Benefits offered by this job

Medical, dental, vision insurance

401(k) plan

Unlimited PTO

Job summary

NinjaOne is seeking an Application Security Architect to advance security across software and cloud environments. You will partner with engineering, platform, and product teams to embed secure design from planning through deployment, mentor engineers, and improve security maturity across the organization.

Location is flexible for US-based candidates with a hybrid option in Austin, TX or Tampa, FL. You will influence security strategy and drive resilient, compliant solutions while collaborating

Qualifications

• 5+ years of experience in software security, including 2+ years in security architecture or offensive security roles.
• Proficiency in one or more programming languages: Java, Kotlin, C++.
• Strong understanding of application security fundamentals, including authentication, authorization, cryptography, and secure communications.
• Experience with security frameworks and methodologies such as OWASP, NIST, BSIMM, STRIDE, and DREAD.
• Hands‑on experience with identity and access management technologies (OAuth 2.0, SAML, OIDC).
• Knowledge of cloud security in AWS environments.
• Experience with modern delivery technologies, including IaC and CI/CD pipelines.
• Solid understanding of Linux and Windows security in enterprise environments.
• Experience with security testing and common security tooling.
• Excellent communication, analytical, and problem‑solving skills.

Responsibilities

• Partner with engineering teams to review system designs and source code for security and architectural risks.
• Lead threat modeling, secure design reviews, and architecture review sessions with engineering teams.
• Execute and help improve our AI‑assisted workflows for product security.
• Define and guide security initiatives from proof‑of‑concept through operational maturity.
• Develop clear reports and presentations for technical and executive audiences.
• Document security architectures, policies, and best practices.
• Mentor and provide technical guidance to other security team members.
• Promote a culture of security awareness across the organization, driving and evolving the Security Champions program to foster shared ownership of secure design practices.

Skills

Java

Kotlin

C++

Authentication

OAuth 2.0

SAML

OIDC

Threat modeling

Security design

Secure coding

Education

Bachelor's degree in Computer Science

Tools

AWS

CI/CD pipelines

IaC

Linux security

Windows security

Job description

About the Role

The Application Security Architect role is pivotal to the NinjaOne team, with company-wide visibility spanning individual developers through executive leadership. As part of NinjaOne's core Information Security organization, you will directly contribute to the security, privacy, reliability, and user experience of more than 6,000 customers across MSP and enterprise IT environments.

Description

This is a highly technical, architecture-focused role blending hands‑on software security and secure design principles. Ideally, you have a solid background in both software engineering and security. You will work across application, cloud, infrastructure, and identity layers to embed security into NinjaOne's software and systems from design through deployment. Working closely with engineering, platform, and product teams, you will lead code reviews, secure design and architecture reviews, anticipate emerging threats, and help drive scalable, resilient, and compliant security solutions. You will also serve as a security mentor to engineering teams, helping raise overall security maturity across the organization.

Location - We are flexible on remote working from home, if you are located in the USA and reside in one of the following states - CA, CO, CT, FL, GA, *IL, KS, MA, MD, ME, NJ, NC, NY, OH, OR, TN, TX, VA, and WA. We have physical offices in Austin, TX and Tampa, FL, if you prefer a hybrid option.

What You’ll Be Doing

• Partner with engineering teams to review system designs and source code for security and architectural risks
• Lead threat modeling, secure design reviews, and architecture review sessions with engineering teams
• Execute and help improve our AI‑assisted workflows for product security
• Define and guide security initiatives from proof‑of‑concept through operational maturity
• Develop clear reports and presentations for technical and executive audiences
• Document security architectures, policies, and best practices
• Mentor and provide technical guidance to other security team members
• Promote a culture of security awareness across the organization, driving and evolving the Security Champions program to foster shared ownership of secure design practices

About You

• 5+ years of experience in software security, including 2+ years in security architecture or offensive security roles
• Proficiency in one or more programming languages: Java, Kotlin, C++
• Strong understanding of application security fundamentals, including authentication, authorization, cryptography, and secure communications
• Experience with security frameworks and methodologies such as OWASP, NIST, BSIMM, STRIDE, and DREAD
• Hands‑on experience with identity and access management technologies (OAuth 2.0, SAML, OIDC)
• Knowledge of cloud security in AWS environments
• Experience with modern delivery technologies, including IaC and CI/CD pipelines
• Solid understanding of Linux and Windows security in enterprise environments
• Experience with security testing and common security tooling
• Excellent communication, analytical, and problem‑solving skills

Education & Certifications

• Bachelor's degree in Computer Science, Information Technology, or a related field (or equivalent practical experience)
• Relevant certifications such as OSCP, OSWE, or SecurityX are preferred but not required

About Us

NinjaOne unifies IT to simplify work for nearly 40,000 customers in 140+ countries.

The NinjaOne Unified IT Operations Platform delivers endpoint management, autonomous patching, backup, and remote access in a single console to improve efficiency, increase resilience, and reduce spend. By automating IT and managing all endpoints, organizations give employees a great technology experience at work. NinjaOne is obsessed with customer success and has retained a 98% customer satisfaction score for more than 5 years.

What You’ll Love

We are a collaborative, kind, and curious community.

We honor your flexibility needs with full-time work that is hybrid remote.

We have you covered with our comprehensive benefits package, which includes medical, dental, and vision insurance.

We help you prepare for your financial future with our 401(k) plan.

We prioritize your work-life balance with our unlimited PTO.

We reward your work with opportunity for growth and advancement.

Additional Information

This position is NOT eligible for Visa sponsorship.

• Due to operational policies, NinjaOne is unable to hire for this role within the city limits of Chicago. We will consider all qualified candidates who reside outside of the city proper or are willing to self-relocate.

Salary & Benefits

Starting pay for the successful applicant depends on a variety of job-related factors, including but not limited to location, market demands, experience, job-related knowledge, and skills. The benefits available for this position include medical, dental, vision, 401(k) plan, life insurance coverage and PTO.

For roles based in California, Colorado, Maryland, New Jersey, or Washington the base salary hiring range for this position is $140,000 - $180,000 per year.

For roles based in New York, the base salary hiring range for this position is $140,000 - $180,000 per year.

Equality & Diversity

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, genetic information, marital status, veteran status, or any other status protected by applicable law. We are committed to providing an inclusive and diverse work environment.