Application Security Architect

NinjaOne is looking for an Application Security Architect to join the core Information Security organization in a highly technical, architecture-focused role. You will work across NinjaOne’s software and systems, embedding security across application, cloud, infrastructure, and identity layers while supporting security design and review activities from early concepts through deployment.

This is a remote position with flexibility for work from home within the USA, alongside the option of hybrid work depending on location. The role also emphasizes cross-functional collaboration with engineering teams, including threat modeling, secure design reviews, and the advancement of security practices supported by AI-assisted workflows.

Key Responsibilities

• Partner with engineering teams to evaluate system designs and review source code for security and architectural risks
• Lead threat modeling, secure design reviews, and architecture review sessions with engineering teams
• Execute and continuously improve AI-assisted workflows for product security
• Define and guide security initiatives from proof-of-concept through operational maturity
• Create clear reports and presentations for both technical and executive audiences
• Document security architectures, policies, and best practices
• Mentor and provide technical guidance to other security team members
• Drive organization-wide security awareness and evolve the Security Champions program to support shared ownership of secure design practices

Requirements

• 5+ years of experience in software security, including 2+ years in security architecture or offensive security roles
• Proficiency in one or more programming languages: Java, Kotlin, C++
• Strong understanding of application security fundamentals, including authentication, authorization, cryptography, and secure communications
• Experience with security frameworks and methodologies: OWASP, NIST, BSIMM, STRIDE, DREAD
• Hands-on experience with identity and access management technologies: OAuth 2.0, SAML, OIDC
• Knowledge of cloud security in AWS environments
• Experience with modern delivery technologies, including IaC and CI/CD pipelines
• Solid understanding of Linux and Windows security in enterprise environments
• Experience with security testing and common security tooling
• Excellent communication, analytical, and problem-solving skills

Technologies

• Java, Kotlin, C++
• OAuth 2.0, SAML, OIDC
• AWS, IaC, CI/CD
• Linux, Windows
• OWASP, NIST, BSIMM, STRIDE, DREAD

Location

• Remote (work from home) flexible for candidates located in the USA and residing in: CA, CO, CT, FL, GA, IL, KS, MA, MD, ME, NJ, NC, NY, OH, OR, TN, TX, VA, WA
• Physical offices in Austin, TX and Tampa, FL for hybrid options

Compensation

USD 140,000 - 180,000 per year. Starting pay depends on job-related factors including location, market demands, experience, job-related knowledge, and skills. For roles based in California, Colorado, Maryland, New Jersey, or Washington, and for New York, the base salary hiring range is $140,000 - $180,000 per year.

Benefits

• Medical, dental, and vision insurance
• 401(k) plan
• Unlimited PTO

Additional Information

• Visa sponsorship is not available for this position
• Due to operational policies, NinjaOne is unable to hire for this role within the city limits of Chicago
• Qualified candidates residing outside the city proper or willing to self-relocate will be considered
• All qualified applicants receive consideration for employment without regard to legally protected characteristics