Security Architect

WHOOP, a leading performance optimization company, as a Security Architect. In this role, you will help build and scale the Security Architecture function within the Information Security organization. You will establish standards, governance, reusable design patterns, and trusted partnerships with engineering teams.

Responsibilities

• You will also provide architectural guidance throughout the software development lifecycle, develop and maintain security architecture principles, and lead architecture reviews.
• This is a unique opportunity to shape the long-term vision and operating model for Security Architecture at WHOOP.
• Establish standards, governance, reusable design patterns, and trusted partnerships with engineering teams to define how security architecture is practiced across the company.
• Develop and maintain security architecture principles, standards, reference architectures, and reusable design patterns that enable engineering teams to build secure systems consistently.
• Review application, cloud, infrastructure, AI, and enterprise technology initiatives to identify architectural risks, validate security controls, and recommend practical mitigation strategies.

Requirements

• This role requires someone who enjoys working with people as much as solving technical problems and can translate complex security concepts into clear, actionable guidance
• Comfortable working independently while helping establish new security processes, standards, governance models, and architectural practices in a growing organization
• Previous software engineering or application development experience with the ability to understand application design, architecture, implementation tradeoffs, and engineering workflows
• Exceptional interpersonal, written, and verbal communication skills with a proven ability to build trust, influence technical decisions, and collaborate effectively across engineering, product, IT, and security organizations
• High integrity, sound judgment, intellectual curiosity, and a pragmatic, solution-oriented approach to solving complex security challenges
• Strong understanding of application security, secure software development, infrastructure security, cloud security, API security, identity and access management, enterprise networking, and modern security architecture principles
• 8–12+ years of experience in security architecture, application security, cloud security, infrastructure security, or senior security engineering roles supporting modern distributed systems
• Ability to balance security requirements with business objectives and provide practical, risk-based recommendations that engineering teams can successfully implement
• Demonstrated experience designing and securing cloud-native applications and infrastructure, with deep knowledge of AWS security services and modern cloud architecture
• Professional security certifications such as CISSP, CCSP, AWS Certified Security – Specialty, GIAC, TOGAF, or equivalent are considered a plus
• A collaborative, approachable, and service-oriented mindset with the ability to establish strong working relationships across teams and become a trusted partner to engineers and technical leaders
• Experience performing architecture reviews, security design assessments, and threat modeling for complex distributed systems

Pay

USD 155,000 - 195,000

Familiarity with healthcare, regulated environments, or security programs supporting HIPAA, PCI DSS, ISO 27001, SOC 2, NIST 800-53, or similar regulatory and compliance frameworks

Interested in the role, but don’t meet every qualification? We encourage you to still apply! At WHOOP, we believe there is much more to a candidate than what is written on paper, and we value character as much as experience. As we continue to build a diverse and inclusive environment, we encourage anyone who is interested in this role to apply