Application Security Architect

Cybersecurity Jobs; United States; Remote; USD 140,000 - 180,000; Full time

Benefits offered by this job

Medical, dental, and vision insurance

401(k) plan

Unlimited PTO

Life insurance coverage

Growth and advancement opportunities

Job summary

NinjaOne is seeking an Application Security Architect to strengthen security across its software and systems. This highly technical, architecture-focused role partners with engineering to embed secure design practices in product development and mentor team members.

You will influence security workflows with AI-assisted approaches and drive shared ownership of secure architecture via the Security Champions program.

Qualifications

• 5+ years of experience in software security with emphasis on architecture or offensive security.
• Proficient in Java, Kotlin and C++ with strong security fundamentals.
• Experience with security frameworks and IAM technologies (OAuth, SAML, OIDC).
• Cloud security in AWS and modern delivery tech (IaC, CI/CD).
• Strong communication and mentoring capabilities.

Responsibilities

• Partner with engineering to review designs and code for security risks.
• Lead threat modeling and architecture reviews with teams.
• Drive AI-assisted security workflows and secure design practices.
• Define security initiatives from PoC to operational maturity.
• Create reports for technical and executive audiences.
• Document architectures, policies, and best practices.
• Mentor security staff and grow the Security Champions program.
• Promote security awareness across the org.

Skills

5+ years experience

Security architecture

Java

Kotlin

C++

Authentication

Authorization

Cryptography

Secure communications

OWASP

NIST

BSIMM

STRIDE

DREAD

OAuth 2.0

SAML

OIDC

AWS

IaC

CI/CD

Linux

Windows

Security testing

Education

Bachelor’s degree in Computer Science or related field

Tools

Security tooling

Job description

NinjaOne is hiring an Application Security Architect to strengthen security across its software and systems. This is a highly technical, architecture-focused role within the core Information Security organization, working with engineering to embed secure design practices into everyday product development. You will also have the opportunity to influence security workflows through AI-assisted approaches, mentor security team members, and help drive shared ownership of secure architecture via the Security Champions program.

Responsibilities

• Partner with engineering teams to review system designs and source code for security and architectural risks
• Lead threat modeling, secure design reviews, and architecture review sessions with engineering teams
• Execute and help improve AI-assisted workflows for product security
• Define and guide security initiatives from proof-of-concept through operational maturity
• Create clear reports and presentations for technical and executive audiences
• Document security architectures, policies, and best practices
• Mentor and provide technical guidance to other security team members
• Promote a culture of security awareness across the organization by driving and evolving the Security Champions program

What you’ll bring

• 5+ years of experience in software security, including 2+ years in security architecture or offensive security roles
• Proficiency in one or more programming languages: Java, Kotlin, C++
• Strong application security fundamentals, including authentication, authorization, cryptography, and secure communications
• Experience with security frameworks and methodologies: OWASP, NIST, BSIMM, STRIDE, DREAD
• Hands-on experience with identity and access management technologies: OAuth 2.0, SAML, OIDC
• Knowledge of cloud security in AWS environments
• Experience with modern delivery technologies, including IaC and CI/CD pipelines
• Solid understanding of Linux and Windows security in enterprise environments
• Experience with security testing and common security tooling
• Excellent communication, analytical, and problem-solving skills

Technologies

Java, Kotlin, C++, OWASP, NIST, BSIMM, STRIDE, DREAD, OAuth 2.0, SAML, OIDC, AWS, IaC, CI/CD, Linux, Windows, OSCP, OSWE, SecurityX

Compensation and location

USD 140,000 - 180,000 per year. Starting pay depends on job-related factors including location, market demands, experience, job-related knowledge, and skills. For roles based in California, Colorado, Maryland, New Jersey, or Washington, the base salary hiring range is $140,000 - $180,000 per year. For roles based in New York, the base salary hiring range is also $140,000 - $180,000 per year.

This role is remote with flexibility to work from home if you are located in the USA and reside in one of the following states: CA, CO, CT, FL, GA, IL, KS, MA, MD, ME, NJ, NC, NY, OH, OR, TN, TX, VA, and WA. NinjaOne also has physical offices in Austin, TX and Tampa, FL if you prefer a hybrid option.

Benefits

• Medical, dental, and vision insurance
• 401(k) plan
• Unlimited PTO
• Life insurance coverage
• Opportunity for growth and advancement

Additional information

• This position is NOT eligible for visa sponsorship
• Due to operational policies, NinjaOne is unable to hire for this role within the city limits of Chicago. Qualified candidates residing outside of the city proper or willing to self-relocate will be considered

Education

Bachelor’s degree in Computer Science, Information Technology, or a related field (or equivalent practical experience).