Application Security Architect

NinjaOne is hiring an Application Security Architect to strengthen security across its software and systems. This is a highly technical, architecture-focused role within the core Information Security organization, working with engineering to embed secure design practices into everyday product development. You will also have the opportunity to influence security workflows through AI-assisted approaches, mentor security team members, and help drive shared ownership of secure architecture via the Security Champions program.

Responsibilities

• Partner with engineering teams to review system designs and source code for security and architectural risks
• Lead threat modeling, secure design reviews, and architecture review sessions with engineering teams
• Execute and help improve AI-assisted workflows for product security
• Define and guide security initiatives from proof-of-concept through operational maturity
• Create clear reports and presentations for technical and executive audiences
• Document security architectures, policies, and best practices
• Mentor and provide technical guidance to other security team members
• Promote a culture of security awareness across the organization by driving and evolving the Security Champions program

What you’ll bring

• 5+ years of experience in software security, including 2+ years in security architecture or offensive security roles
• Proficiency in one or more programming languages: Java, Kotlin, C++
• Strong application security fundamentals, including authentication, authorization, cryptography, and secure communications
• Experience with security frameworks and methodologies: OWASP, NIST, BSIMM, STRIDE, DREAD
• Hands-on experience with identity and access management technologies: OAuth 2.0, SAML, OIDC
• Knowledge of cloud security in AWS environments
• Experience with modern delivery technologies, including IaC and CI/CD pipelines
• Solid understanding of Linux and Windows security in enterprise environments
• Experience with security testing and common security tooling
• Excellent communication, analytical, and problem-solving skills

Technologies

Java, Kotlin, C++, OWASP, NIST, BSIMM, STRIDE, DREAD, OAuth 2.0, SAML, OIDC, AWS, IaC, CI/CD, Linux, Windows, OSCP, OSWE, SecurityX

Compensation and location

USD 140,000 - 180,000 per year. Starting pay depends on job-related factors including location, market demands, experience, job-related knowledge, and skills. For roles based in California, Colorado, Maryland, New Jersey, or Washington, the base salary hiring range is $140,000 - $180,000 per year. For roles based in New York, the base salary hiring range is also $140,000 - $180,000 per year.

This role is remote with flexibility to work from home if you are located in the USA and reside in one of the following states: CA, CO, CT, FL, GA, IL, KS, MA, MD, ME, NJ, NC, NY, OH, OR, TN, TX, VA, and WA. NinjaOne also has physical offices in Austin, TX and Tampa, FL if you prefer a hybrid option.

Benefits

• Medical, dental, and vision insurance
• 401(k) plan
• Unlimited PTO
• Life insurance coverage
• Opportunity for growth and advancement

Additional information

• This position is NOT eligible for visa sponsorship
• Due to operational policies, NinjaOne is unable to hire for this role within the city limits of Chicago. Qualified candidates residing outside of the city proper or willing to self-relocate will be considered

Education

Bachelor’s degree in Computer Science, Information Technology, or a related field (or equivalent practical experience).