Security Architect

Quickbase; Massachusetts; On-site; USD 184,000 - 290,000; Full time

Benefits offered by this job

Annual incentive plan

Medical, dental and vision benefits

401(k) with company match

Job summary

Quickbase in the United States is seeking a Security Architect to shape and scale security across our SaaS products, cloud environments, applications, and AI capabilities. This is a hands-on architecture role that sits at the intersection of Security, Engineering, Product, and Technology.

The Security Architect will embed security from design and guide teams with practical engineering guardrails. You will lead security architecture reviews, drive secure design and threat modeling, and partner

Qualifications

• 7+ years of experience across Security Engineering, Application Security, Product Security, Cloud Security, or Security Architecture.
• Strong experience designing or reviewing modern SaaS and cloud-native architectures.
• Deep understanding of application security concepts and common software vulnerabilities.
• Experience with AWS or comparable public cloud platforms.
• Strong knowledge of authentication, authorization, OAuth/OIDC, APIs, encryption, and secrets management.
• Familiarity with AppSec tools (SAST/DAST/SCA) and CI/CD security controls.
• Understanding of containers, Kubernetes, serverless, and microservices security.
• Hands-on development experience preferred; ability to work with engineers.
• Knowledge of AI/LLM security risks and secure AI development practices.

Skills

Security architecture

Application Security

Cloud Security

Threat modeling

AWS

CI/CD security

Identity management

Tools

GitHub Advanced Security

Wiz/Wiz Code

Snyk

Semgrep

Burp Suite

Job description

At Quickbase, we help organizations build better ways to run their operations. Our products give teams the flexibility to create applications around how their work actually happens, connecting people, information and processes so they can keep work moving as needs change. For more than 25 years, organizations have turned to Quickbase to solve operational challenges that off‑the‑shelf software wasn't built for. Today, we’re building on that foundation with new products and new possibilities for how people create, adapt, and improve the systems their work depends on. Working at Quickbase means helping find better ways forward. We’re a team of curious, collaborative people who care about solving problems, learning as we go, and building things that make work better for our customers and each other.

Title: Security Architect

Location: Remote, US

Reporting to: VP, CISO

Department: Product Security

About the Role

We are looking for a Security Architect to help shape and scale security across our products, cloud environments, applications, and emerging AI capabilities. This is a hands‑on architecture role that sits at the intersection of Security, Engineering, Product, and Technology. The Security Architect will help teams move quickly while ensuring security is designed into solutions from the beginning—not added as a gate at the end. The right candidate combines strong technical depth with pragmatic risk judgment. You should be equally comfortable reviewing a new product architecture, discussing threat models with engineers, evaluating AI‑generated code, identifying systemic security risks, and translating those risks into practical engineering guardrails.

What You’ll Own

• Serve as the primary security architecture partner for Product, Engineering, Cloud, and Platform teams.
• Lead security architecture reviews for new products, services, integrations, APIs, and major technology changes.
• Drive Application Security architecture and strategy, including secure design, threat modeling, secure coding practices, and vulnerability prevention.
• Partner with engineering teams to embed security into the software development lifecycle (SDLC) and CI/CD pipelines.
• Review application and cloud architectures to identify security risks before systems reach production.
• Establish reusable security patterns, standards, and guardrails that allow engineering teams to move faster without requiring security review for every decision.
• Provide architectural guidance for identity, authentication, authorization, secrets management, encryption, API security, data protection, and service‑to‑service communication.
• Help mature our approach to cloud‑native security across AWS and SaaS environments.
• Partner with engineering teams on remediation of critical and systemic vulnerabilities.
• Evaluate security implications of AI‑enabled products, AI‑generated code, agents, LLM integrations, and emerging development technologies.
• Work closely with Product Security, Security Operations, GRC, IT, Privacy, and Legal to ensure security architecture aligns with regulatory and customer requirements.
• Support security assessments for acquisitions, strategic technology implementations, and third‑party integrations.
• Help define and measure security architecture and AppSec program effectiveness.

Application Security Responsibilities

• Threat modeling and secure design reviews.
• Secure code and architecture reviews.
• Software composition and dependency risk.
• Secrets detection and credential management.
• API and authentication security.
• SAST, DAST, SCA, and developer security tooling.
• Vulnerability prioritization and remediation guidance.
• Secure‑by‑default development patterns.
• Security of AI‑generated and AI‑assisted code.
• Working directly with developers to reduce vulnerabilities at their source rather than relying solely on downstream detection.

AI and the Future of the Role

AI will be an important force multiplier for this role. The Security Architect will use AI‑assisted capabilities to accelerate threat modeling, architecture analysis, code review, vulnerability triage, research, and documentation. At the same time, this role will help establish the controls required to ensure AI‑generated software and AI‑enabled product capabilities meet our security standards. The expectation is not simply to perform traditional security reviews faster. The role will help evolve our security architecture model toward automated guardrails, developer self‑service, risk‑based review, and security‑by‑design, allowing Security to scale alongside the business.

What We’re Looking For

• 7+ years of experience across Security Engineering, Application Security, Product Security, Cloud Security, or Security Architecture.
• Strong experience designing or reviewing modern SaaS and cloud‑native architectures.
• Deep understanding of application security concepts and common software vulnerabilities.
• Experience with AWS or comparable public cloud platforms.
• Strong knowledge of authentication, authorization, OAuth/OIDC, APIs, encryption, secrets management, and modern identity architectures.
• Experience with threat modeling and secure design reviews.
• Familiarity with AppSec technologies such as SAST, DAST, SCA, secrets scanning, CSPM/CNAPP, and CI/CD security controls.
• Understanding of container, Kubernetes, serverless, and microservices security.
• Ability to understand code and work effectively with software engineers; hands‑on development experience is strongly preferred.
• Working knowledge of AI/LLM security risks and emerging secure AI development practices.
• Ability to translate technical security risks into clear business decisions and practical remediation.
• Strong communication and collaboration skills with both engineers and senior leadership.

Preferred Qualifications

• Experience securing enterprise SaaS products.
• Experience building or scaling an Application Security or Product Security program.
• Experience with tools such as GitHub Advanced Security, Wiz/Wiz Code, Snyk, Semgrep, Burp Suite, or comparable platforms.
• Familiarity with OWASP Top 10, OWASP ASVS, MITRE ATT&CK, NIST, CIS, and common security architecture frameworks.
• Experience with AI security, LLM applications, agentic architectures, or AI‑assistant software development.
• Relevant certifications such as CISSP, CSSLP, AWS Security Specialty, or equivalent are helpful but not required.

How We Define Success

• Reduce security issues discovered late in the development lifecycle.
• Improve consistency and speed of security architecture reviews.
• Establish reusable security patterns that enable engineering teams to self‑serve.
• Reduce critical and high‑risk application vulnerabilities.
• Strengthen security within CI/CD and developer workflows.
• Establish practical security guardrails for AI‑generated code and AI‑enabled product development.
• Make Security a team that helps Engineering understand how to move forward safely, rather than simply telling teams what they cannot do.

Profile

We are looking for someone who is technically credible, curious, pragmatic and comfortable challenging assumptions. This person should understand that strong security architecture is not about eliminating all risk. It is about understanding the risk, designing the right guardrails, and helping the business move forward with confidence.

How We Think About AI

At Quickbase, we view AI as a tool to accelerate how work gets done — not replace it. We encourage thoughtful use of AI to improve speed, quality, and decision‑making, while maintaining strong judgment, accountability, and data integrity.

Pay Range

$184,264.15 - $289,557.95

Compensation & Benefits

At Quickbase, we believe in pay transparency and are committed to equitable pay practices.

• Incentive Compensation: This role is eligible to participate in our annual incentive plan. Incentives are earned based on employee performance against defined metrics and company goals.
• Benefits: Full‑time roles are eligible for our comprehensive benefits program which includes medical, dental and vision coverage.
• 401(k) Plan: You may also contribute to our 401(k) plan that includes a company match.

Equal Opportunity Statement

Quickbase is committed to building a diverse and inclusive workplace. We encourage candidates from all backgrounds to apply – even if you don’t meet every qualification listed. We are proud to be an equal opportunity employer.

Work that makes an impact

At Quickbase, we’re on a mission to transform ordinary work into extraordinary impact — for our customers, and for ourselves. We are the leading application platform for work management, helping organizations connect people, processes, and systems in one place so they can confidently manage the work that matters most. From complex, multi‑system projects to everyday workflows, Quickbase brings clarity to chaos. Our platform centralizes data, automates processes, and provides real‑time visibility — enabling teams to see, connect, and control their operations from day one to done. When you join Quickbase, you become part of a global community of builders, problem‑solvers, and systems thinkers. We collaborate closely, move quickly, and continuously improve how work gets done – driving measurable impact at scale.