Senior Security Architect

Siteimprove is a leading SaaS company focused on improving digital experiences through accessibility, SEO, analytics, and compliance solutions. Our vision is to take our agentic content intelligence platform where accessibility meets performance, even further. Driving innovation and security to empower organizations to deliver inclusive, high-performing digital experiences. Security is a cornerstone of this vision, ensuring trust and resilience as we evolve and expand. 

As a Security Architect, you will design and implement secure architectures across Siteimprove’s cloud-based platforms and services. Your primary responsibility is to ensure software, code, and network designs follow security best practices throughout the development lifecycle. You will influence technical decisions across teams, champion Zero Trust Architecture, and embed security into the Secure Software Development Lifecycle (SDLC). Additionally, you will play a key role in securing the use of AI within Siteimprove’s products, applying Privacy by Design principles and AI governance frameworks to mitigate risks and enable responsible innovation as we advance our platform. 

• Define and maintain security architecture for Siteimprove’s SaaS platforms, ensuring compliance with industry standards (ISO 27001, SOC 2, GDPR, HIPAA, FedRAMP). 
• Establish and enforce secure coding, software design, and network architecture best practices across the SDLC. 
• Champion Zero Trust Architecture principles for identity, access, and data protection. 
• Conduct threat modeling, risk assessments, and architecture reviews for new and existing products. 
• Collaborate with engineering and product teams to influence design decisions and embed security early in development. 
• Apply Privacy by Design principles to all product features and ensure compliance with global data protection regulations. 
• Develop strategies for securing AI features within Siteimprove’s products, including adherence to AI governance frameworks and responsible AI usage. 
• Drive innovation in security practices, ensuring scalable and future-ready architectures as the platform evolves. 
• Stay ahead of emerging technologies and evolving threat landscapes, advising leadership on strategic security initiatives. 

• Education: Bachelor’s or Master’s degree in Computer Science, Information Security, or related field. 
• 7+ years in information security roles, with at least 3 years in a security architecture capacity. 
• Strong knowledge of AWS security principles and SaaS environments. 
• Expertise in secure software development practices and network security design. 
• Familiarity with container security and microservices architecture. 
• Experience implementing security controls aligned with NIST, CIS, OWASP frameworks. 
• AI Expertise: Understanding of risks and security considerations for AI/ML features in SaaS products. 
• Experience defining policies for secure AI integration and data governance. 

• Certifications: CISSP, CCSP, AWS Certified Security – Specialty, or similar. 
• Knowledge of compliance frameworks (GDPR, HIPAA, FedRAMP). 
• Strong influencing and communication skills to guide technical and business stakeholders. 
• Ability to foster innovation while maintaining security and compliance. 

• Rest and relaxation: Open Paid Time Off (OPTO) program for vacation, personal illness, mental health, or to care for a family member, 11 paid holidays, and volunteer leave.
• Comprehensive benefits: National medical plan, dental, vision, paid maternity leave, paid paternity leave, HSA, Flex, employer-sponsored short-term, long-term disability, discounts to volunteer plans to meet your family needs, and more!
• Prepare for the future: 401(k) with a company match to provide a better future in your retirement years.