New

Security Architect - Application Security / Threat Modeling

Vaco
$180,000.00 - $200,000.00 / yr
401(k), retirement plan
United States, Arizona, Phoenix
May 16, 2025
Vaco has partnered with a growing, product-driven company in the health & wellness space that's actively maturing their security posture as they expand into new global markets. This newly defined Security Architect role is a net-new seat-reporting into senior leadership and partnering across engineering, DevOps, and compliance teams. This is not a tooling-heavy or SOC-focused role. This is application security meets secure architecture. You'll be the person who helps define how secure software is built, where risk exists, and how to mitigate it across cloud-native systems and modern development pipelines. What You'll Be Doing Leading threat modeling efforts across web applications, APIs, cloud services, and microservices environments. Helping teams write secure software-especially around API exposure, external-facing systems, and dependency management. Advising on secure design patterns for services built in Java-based environments (but no Java coding required). Defining and advising on secrets management strategy, data classification, and how to handle PII as the org expands into GDPR-governed regions. Creating and maintaining penetration test plans (but not executing tests yourself). Acting as a strategic partner, working across engineering and product to shape policy, not just react to incidents. Supporting Zero Trust architecture decisions across identity, access, and network segmentation layers. Collaborating with compliance and legal stakeholders to ensure systems align with PCI, GDPR, and CCPA frameworks. What They're Looking For Background in application development, security, and/or architecture with strong experience guiding secure software practices (especially around APIs and distributed systems). Ability to create threat models, influence secure design decisions, and partner across engineering orgs. Strong understanding of cloud security (AWS preferred), but open to Azure or GCP backgrounds. Comfort with compliance-heavy environments and how to protect regulated data. Experience building policies and influencing without being authoritarian-this is a cross-functional role requiring tact and backbone. Why This Role? New seat with a lot of runway-greenfield opportunities to define how security is done at scale. Company leadership is fully bought in on security-this isn't a checkbox hire. Direct impact on protecting customers and sensitive data as the business grows internationally. You get to set the tone without inheriting a mess of broken tooling or bad architecture. Interested or know someone who'd be a fit? Let's talk. We'll walk you through the real story behind the role, the team dynamics, and where you can drive impact from day one. Determining compensation for this role (and others) at Vaco/Highspring depends upon a wide array of factors including but not limited to the individual's skill sets, experience and training, licensure and certifications, office location and other geographic considerations, as well as other business and organizational needs. With that said, as required by local law in geographies that require salary range disclosure, Vaco/Highspring notes the salary range for the role is noted in this job posting. The individual may also be eligible for discretionary bonuses, and can participate in medical, dental, and vision benefits as well as the company's 401(k) retirement plan. Vaco by Highspring values a diverse workplace and strongly encourages women, people of color, LGBTQ+ individuals, people with disabilities, members of ethnic minorities, foreign-born residents, and veterans to apply. EEO Notice Vaco by Highspring is an Equal Opportunity Employer and does not discriminate against any employee or applicant for employment because of race (including but not limited to traits historically associated with race such as hair texture and hair style), color, sex (includes pregnancy or related conditions), religion or creed, national origin, citizenship, age, disability, status as a veteran, union membership, ethnicity, gender, gender identity, gender expression, sexual orientation, marital status, political affiliation, or any other protected characteristics as required by federal, state or local law. Vaco by Highspring and its parents, affiliates, and subsidiaries are committed to the full inclusion of all qualified individuals. As part of this commitment, Vaco by Highspring and its parents, affiliates, and subsidiaries will ensure that persons with disabilities are provided reasonable accommodations. If reasonable accommodation is needed to participate in the job application or interview process, to perform essential job functions, and/or to receive other benefits and privileges of employment, please contact HR@vaco.com . Vaco by Highspring also wants all applicants to know their rights that workplace discrimination is illegal. By submitting to this position, you agree that you will be giving Vaco by Highspring the exclusive right to present your as a candidate for the foregoing employment opportunity. You further agree that you have represented information about yourself accurately and have not affirmatively misrepresented your qualifications. You also agree to maintain as confidential, to the fullest extent permitted by law, any information you learn from Vaco by Highspring about the position and you will limit disclosure of information about the position only to the extent necessary to perform any obligations in furtherance of your application. In exchange, Vaco by Highspring agrees to exercise reasonable efforts to represent you through all solicitation, job screening and resume dispersal. Privacy Notice Vaco by Highspring and its parents, affiliates, and subsidiaries ("we," "our," or "Vaco by Highspring") respects your privacy and are committed to providing transparent notice of our policies. California residents may access Vaco by Highspring HR Notice at Collection for California Applicants and Employees here. Virginia residents may access our state specific policies here. Residents of all other states may access our policies here. Canadian residents may access our policies in English here and in French here. Residents of countries governed by GDPR may access our policies here. Pay Transparency Notice Determining compensation for this role (and others) at Vaco by Highspring depends upon a wide array of factors including but not limited to: the individual's skill sets, experience and training; licensure and certification requirements; office location and other geographic considerations; other business and organizational needs. With that said, as required by local law, Vaco by Highspring believes that the following salary range referenced above reasonably estimates the base compensation for an individual hired into this position in geographies that require salary range disclosure. The individual may also be eligible for discretionary bonuses.