Sr Product Security Architect

datavant2; Stati Uniti; Remoto; USD 184.000 - 230.000; Tempo pieno

Descrizione del lavoro

datavant2 is seeking a security-focused engineer to shape product security by reviewing architecture and code, identifying risks, and guiding teams through the full development lifecycle.

You will conduct secure reviews, threat modeling, and lead security-improvement projects with engineering, product, and compliance stakeholders. The role emphasizes practical risk management and collaboration with legacy systems while applying industry standards.

Competenze

• 6+ years in architecture and threat-model reviews.
• 6+ years implementing compliance controls in practice.
• Ability to adapt to new technologies and languages.
• Experience delivering security work in fast-paced environments.
• Familiarity with AI tools and AI platforms.

Mansioni

• Perform secure code, architecture, and threat-model reviews with actionable findings.
• Advise on security design for applications and cloud, considering legacy systems.
• Lead security improvement projects with engineering, product, and compliance stakeholders.
• Prioritize security work and document controls to clarify expectations.
• Balance security needs with delivery timelines using practical risk management.

Conoscenze

Threat modeling

Secure coding

Cloud security (AWS/Azure)

Compliance controls implementation

Legacy system risk management

Strumenti

AWS

Azure

Model Context Protocol

Descrizione del lavoro

**Role overview**

Shape product security by reviewing application architecture and code, identifying practical risks, and helping engineering teams build safer systems throughout the development lifecycle. The role combines hands-on technical review, threat modeling, security project leadership, and guidance on applying compliance requirements as usable controls.

Responsibilities

• Conduct secure code, architecture, and threat-model reviews, then give engineering teams prioritized, actionable recommendations.
• Advise on application and cloud security design, including tradeoffs involved in protecting legacy systems.
• Lead security improvement projects and collaborate with engineering, product, and compliance stakeholders to deliver them.
• Help prioritize security work such as architectural changes, vulnerability remediation, and control implementation.
• Document controls and processes in ways that clarify expectations and support efficient development.
• Apply practical risk management while balancing security needs with delivery demands.

Requirements

• Hands-on development experience in multiple programming languages and the ability to adapt to new technologies.
• Deep knowledge of application and cloud security, including experience with AWS and/or Azure.
• At least 6 years of experience in architecture and threat-model reviews.
• At least 6 years working with compliance standards and applying controls in practical, low-friction ways.
• Sound judgment about security tradeoffs, especially when working with legacy systems.
• Able to deliver in a fast-paced environment and work as a partner to engineering teams.
• Familiarity with AI tools and their use in improving work processes; knowledge of AI platforms, Model Context Protocol, and model gateways.

Nice to have

• Security experience in healthcare or another regulated industry, including operational experience with standards or frameworks such as HIPAA, HITRUST, SOC 2, PCI, or FedRAMP.

Benefits and work setup

The listing gives an estimated total cash compensation range of $184,000–$230,000. It states that employment sponsorship is not available. Some client work may require post-offer health screening or vaccination documentation.