Security Architecture Lead — Cloud & Compliance

WHOOP; Boston (MA); On-site; USD 155,000 - 195,000; Full time

Benefits offered by this job

Equity package

Competitive benefits

Job summary

WHOOP is seeking a Security Architect to build and scale the Security Architecture function within WHOOP's Information Security group in Boston, MA. The role focuses on establishing standards, governance, and reusable design patterns, while partnering with engineering teams to integrate security into the product lifecycle.

The candidate will bring broad technical expertise across application, cloud, and enterprise security, mentor engineers, and help shape the long-term security architecture

Qualifications

• 8–12+ years in security architecture or related roles.
• Experience securing cloud-native apps and AWS.
• Knowledge of HIPAA, PCI DSS, ISO 27001, SOC 2, NIST.
• Ability to balance security with business goals.
• Strong collaboration and communication across teams.
• Professional security certifications (bonus).

Responsibilities

• Provide architectural guidance across the SDLC with security baked in.
• Define governance, standards, and scalable engagement models.
• Develop reusable security patterns and reference architectures.
• Review initiatives for architectural risks and mitigations.
• Lead architecture reviews with threat models and data flows.
• Provide leadership across application, cloud, infra, API, IAM, secrets, networking, and data protection.
• Collaborate with product, infrastructure, and engineering to align security with products.
• Translate regulatory requirements into engineering guidance.

Skills

Security architecture

AWS security

Threat modeling

Architecture governance

Cloud security

Communication

Regulatory compliance

Mentoring engineers

Security reviews

Security standards

Job description

WHOOP is seeking a Security Architect to build and scale the Security Architecture function within WHOOP's Information Security group in Boston, MA. The role focuses on establishing standards, governance, and reusable design patterns, while partnering with engineering teams to integrate security into the product lifecycle.

The candidate will bring broad technical expertise across application, cloud, and enterprise security, mentor engineers, and help shape the long-term security architecture