Security Architect
About the Role
You will design, implement, and oversee secure systems and applications. You will conduct threat modeling, risk assessments, and security reviews for new and existing products. You will partner with engineering and DevOps to harden CI/CD, secure cloud and container deployments, and implement access controls. You will evaluate and integrate security tools for code scanning, vulnerability management, and incident response. You will develop and enforce secure coding practices and mentor engineers on secure application development. You will stay current with emerging security trends, compliance standards, and attack vectors relevant to fintech and blockchain domains.
Requirements
- 10+ years of experience in software engineering or security architecture roles
- Strong full-stack background with deep backend security expertise (Python, Go, C/C++, Rust, or similar languages)
- Experience designing and securing systems for enterprise fintech, banking, or blockchain environments
- Knowledge of cryptography, authentication, and key management
- Hands-on experience with cloud security (AWS, GCP, or similar)
- Familiarity with threat modeling, secure SDLC, and application security frameworks (OWASP, NIST, ISO 27001)
- Excellent communication skills to articulate risks and solutions to technical and non-technical stakeholders
Responsibilities
- Define and drive security architecture across applications, services, and infrastructure
- Partner with engineering teams to design and implement secure software systems with a backend focus
- Conduct threat modeling, risk assessments, and security reviews for new and existing products
- Develop and enforce secure coding practices, frameworks, and review processes
- Collaborate with DevOps on cloud and container security, CI/CD hardening, and access controls
- Evaluate and integrate security tools for code scanning, vulnerability management, and incident response
- Guide and mentor engineers on best practices for secure application development
- Stay ahead of emerging security trends, compliance standards, and attack vectors