Lead Architect, Application Security

What you'll do

• Define the cross-portfolio application security architecture strategy for hardware, software, and cloud-native solutions.
• Establish architectural principles, patterns, and roadmaps for WAF, API security, DDoS, and identity capabilities.
• Lead the modernization of monolithic capabilities into composable, API-driven services within a SaaS-native control plane.
• Champion architectural governance and threat modeling to ensure scalability, observability, and secure-by-default practices.
• Design and validate architecture for WAAP services, bot mitigation pipelines, and fraud prevention engines.
• Integrate machine learning, heuristics, and behavior analysis engines into runtime defense systems.
• Ensure architectural alignment with global compliance standards including FIPS, FedRAMP, NIST CSF, and GDPR.
• Represent the technical vision in customer briefings, industry forums, and regulatory discussions.

What we're looking for

• 20+ years of experience in software and security architecture roles.
• At least 10 years of experience focused specifically on application-layer security.
• Proven track record architecting complex security systems including WAAP, API security, DDoS mitigation, bot protection, and malware detection.
• Deep understanding of L7 protocols, application security standards, TLS, certificate management, and identity/access protocols.
• Familiarity with zero trust architectures, policy-as-code, multi-tenant SaaS designs, and container-based platforms like Kubernetes.
• Demonstrated ability to set architectural strategy across product boundaries and influence senior engineering and product leadership.
• Broad understanding of coding languages, software development processes, and agile software development designs.
• Strong soft skills including attention to detail, problem-solving, and communication skills.