Security Architect

Quick Facts

• Role: Security Architect (Senior)

Description

Design and assess secure IT architectures for new and existing solutions, including applications, APIs, system integrations, on-premise infrastructure, and hybrid environments. Conduct security architecture reviews, technical security assessments, and threat modeling—identifying risks and translating them into actionable security requirements and recommendations. Act as a Security SME across business and technology projects from concept/design through implementation.

Responsibilities

• Design and review secure architectures for evolving IT solutions.

• Conduct technical security assessments, architecture reviews, and threat modeling for applications, APIs, integrations, and system solutions.

• Provide security guidance and recommendations during the design of new features, applications, and systems.

• Assess authentication and authorization mechanisms, data protection, encryption, secrets management, and secure communication between system components.

• Analyze architecture diagrams, data flows, and trust boundaries to identify potential security risks.

• Evaluate risks related to identity, access, segmentation, and integration between systems.

• Translate identified security risks into specific technical security requirements, controls, and recommendations.

• Collaborate with Solution/Enterprise Architects, Developers, DevOps, Cloud and Infrastructure teams, Product Owners, and System Owners.

• Support teams in implementing practical security controls and ensure security requirements are considered across the solution lifecycle.

• Contribute to security standards, architectural principles, and technical guardrails; promote secure-by-design practices across technology teams.

Requirements

• 5+ years of cybersecurity experience, including practical Security Architecture and/or Application Security.

• Proven experience conducting security architecture reviews, technical security assessments, and threat modeling.

• Strong knowledge of web application, API, and integration security (authentication/authorization, data protection, encryption, secrets management, secure communication between components).

• Strong knowledge of application security standards and best practices: OWASP Top 10, OWASP ASVS, OWASP API Security Top 10, NIST SSDF, CWE Top 25.

• Ability to analyze solution architecture diagrams, data flows, trust boundaries, and communication between components.

• Strong understanding of security risks related to identity and access management and network/system segmentation.

• Ability to translate security risks into clear technical requirements and actionable recommendations.

• Experience working with technical and business stakeholders and influencing security decisions.

• Fluent Polish and at least B2 English (written and spoken).

Benefits

• Comprehensive benefits: Udemy for Business, private medical care, Multisport card, veterinary package, language lessons, and shopping vouchers.

• Career growth: professional development and learning opportunities, including perks with Microsoft, AWS, Snowflake, Salesforce, and more.

• Global collaboration with an international team.

• Innovative environment focused on growth and collaboration.

• Engaging community: team-building events, hackathons, and CSR initiatives (including an annual company event in Mazury).

• Welcome pack to start your journey.