Application Security Architect

NinjaOne is building security into how products are designed, tested, and operated, and this Application Security Architect role supports that mission across the software lifecycle. You will help strengthen software security, privacy, reliability, and user experience by partnering with engineering teams, leading architecture-focused security reviews, and helping scale AI-assisted workflows that improve product security outcomes.

What you’ll do

• Collaborate with engineering teams to review system designs and source code for security and architectural risks
• Lead threat modeling and secure design reviews through architecture review sessions with engineering teams
• Execute and continuously improve AI-assisted workflows for product security
• Define and guide security initiatives from proof-of-concept through operational maturity
• Create clear reports and presentations for both technical and executive audiences
• Document security architectures, policies, and best practices
• Mentor other security team members with technical guidance
• Drive a Security Champions program to promote shared ownership of secure design practices across the organization

What you bring

• 5+ years of experience in software security, including 2+ years in security architecture or offensive security roles
• Proficiency in one or more programming languages: Java, Kotlin, C++
• Strong application security fundamentals across authentication, authorization, cryptography, and secure communications
• Experience applying security frameworks and methodologies including OWASP, NIST, BSIMM, STRIDE, and DREAD
• Hands-on experience with identity and access management technologies: OAuth 2.0, SAML, OIDC
• Knowledge of cloud security in AWS environments
• Experience with modern delivery technologies, including IaC and CI/CD pipelines
• Solid understanding of Linux and Windows security in enterprise environments
• Experience with security testing and common security tooling
• Excellent communication, analytical, and problem-solving skills

Tools and technologies you’ll work with

• Java, Kotlin, C++
• OWASP, NIST, BSIMM, STRIDE, DREAD
• OAuth 2.0, SAML, OIDC
• AWS, IaC, CI/CD
• Linux, Windows
• OSCP, OSWE, SecurityX

Location, salary, and eligibility

Location: Remote. Flexible on remote working from home if located in the USA and residing in: CA, CO, CT, FL, GA, IL, KS, MA, MD, ME, NJ, NC, NY, OH, OR, TN, TX, VA, or WA.

Hybrid option: Physical offices in Austin, TX and Tampa, FL.

Salary: USD 140,000 - 180,000 per yearly (base salary hiring range varies by location but is $140,000 - $180,000 per year for California, Colorado, Maryland, New Jersey, Washington, and New York).

This position is NOT eligible for visa sponsorship. Due to operational policies, NinjaOne is unable to hire for this role within the city limits of Chicago; qualified candidates who reside outside the city proper or are willing to self-relocate will be considered.

Starting pay depends on location, market demands, experience, job-related knowledge, and skills.

Benefits

• Medical, dental, and vision insurance
• 401(k) plan
• Unlimited PTO

Benefits for this position also include life insurance coverage and PTO.

Equal opportunity

NinjaOne provides consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, genetic information, marital status, veteran status, or any other status protected by applicable law. The company is committed to providing an inclusive and diverse work environment.