Security Architect

Security Architect

Location: Remote, US

Reporting to: VP, CISO

Department: Product Security

About the Role

We are looking for a Security Architect to help shape and scale security across our products, cloud environments, applications, and emerging AI capabilities.

This is a hands-on architecture role that sits at the intersection of Security, Engineering, Product, and Technology. The Security Architect will help teams move quickly while ensuring security is designed into solutions from the beginning—not added as a gate at the end.

The right candidate combines strong technical depth with pragmatic risk judgment. You should be equally comfortable reviewing a new product architecture, discussing threat models with engineers, evaluating AI-generated code, identifying systemic security risks, and translating those risks into practical engineering guardrails.

What You'll Own

• Serve as the primary security architecture partner for Product, Engineering, Cloud, and Platform teams.
• Lead security architecture reviews for new products, services, integrations, APIs, and major technology changes.
• Drive Application Security architecture and strategy, including secure design, threat modeling, secure coding practices, and vulnerability prevention.
• Partner with engineering teams to embed security into the software development lifecycle (SDLC) and CI/CD pipelines.
• Review application and cloud architectures to identify security risks before systems reach production.
• Establish reusable security patterns, standards, and guardrails that allow engineering teams to move faster without requiring security review for every decision.
• Provide architectural guidance for identity, authentication, authorization, secrets management, encryption, API security, data protection, and service-to-service communication.
• Help mature our approach to cloud-native security across AWS and SaaS environments.
• Partner with engineering teams on remediation of critical and systemic vulnerabilities.
• Evaluate security implications of AI-enabled products, AI-generated code, agents, LLM integrations, and emerging development technologies.
• Work closely with Product Security, Security Operations, GRC, IT, Privacy, and Legal to ensure security architecture aligns with regulatory and customer requirements.
• Support security assessments for acquisitions, strategic technology implementations, and third-party integrations.
• Help define and measure security architecture and AppSec program effectiveness.

Application Security Responsibilities

A significant portion of this role will focus on Application Security, including:

• Threat modeling and secure design reviews.
• Secure code and architecture reviews.
• Software composition and dependency risk.
• Secrets detection and credential management.
• API and authentication security.
• SAST, DAST, SCA, and developer security tooling.
• Vulnerability prioritization and remediation guidance.
• Secure-by-default development patterns.
• Security of AI-generated and AI-assisted code.
• Working directly with developers to reduce vulnerabilities at their source rather than relying solely on downstream detection.

AI and the Future of the Role

AI will be an important force multiplier for this role.

The Security Architect will use AI-assisted capabilities to accelerate threat modeling, architecture analysis, code review, vulnerability triage, research, and documentation. At the same time, this role will help establish the controls required to ensure AI-generated software and AI-enabled product capabilities meet our security standards.

The expectation is not simply to perform traditional security reviews faster. The role will help evolve our security architecture model toward automated guardrails, developer self-service, risk-based review, and security-by-design, allowing Security to scale alongside the business.

What We're Looking For

• 7+ years of experience across Security Engineering, Application Security, Product Security, Cloud Security, or Security Architecture.
• Strong experience designing or reviewing modern SaaS and cloud-native architectures.
• Deep understanding of application security concepts and common software vulnerabilities.
• Experience with AWS or comparable public cloud platforms.
• Strong knowledge of authentication, authorization, OAuth/OIDC, APIs, encryption, secrets management, and modern identity architectures.
• Experience with threat modeling and secure design reviews.
• Familiarity with AppSec technologies such as SAST, DAST, SCA, secrets scanning, CSPM/CNAPP, and CI/CD security controls.
• Understanding of container, Kubernetes, serverless, and microservices security.
• Ability to understand code and work effectively with software engineers; hands-on development experience is strongly preferred.
• Working knowledge of AI/LLM security risks and emerging secure AI development practices.
• Ability to translate technical security risks into clear business decisions and practical remediation.
• Strong communication and collaboration skills with both engineers and senior leadership.

Preferred Qualifications

• Experience securing enterprise SaaS products.
• Experience building or scaling an Application Security or Product Security program.
• Experience with tools such as GitHub Advanced Security, Wiz/Wiz Code, Snyk, Semgrep, Burp Suite, or comparable platforms.
• Familiarity with OWASP Top 10, OWASP ASVS, MITRE ATT&CK, NIST, CIS, and common security architecture frameworks.
• Experience with AI security, LLM applications, agentic architectures, or AI-assisted software development.
• Relevant certifications such as CISSP, CSSLP, AWS Security Specialty, or equivalent are helpful but not required.

How We Define Success

Within the first year, this role should help us:

• Reduce security issues discovered late in the development lifecycle.
• Improve consistency and speed of security architecture reviews.
• Establish reusable security patterns that enable engineering teams to self-serve.
• Reduce critical and high-risk application vulnerabilities.
• Strengthen security within CI/CD and developer workflows.
• Establish practical security guardrails for AI-generated code and AI-enabled product development.
• Make Security a team that helps Engineering understand how to move forward safely, rather than simply telling teams what they cannot do.

The Profile

We are looking for someone who is technically credible, curious, pragmatic

and comfortable challenging assumptions.

This person should understand that strong security architecture is not about eliminating all risk. It is about understanding the risk, designing the right guardrails, and helping the business move forward with confidence.

How We Think About AI At Quickbase, we view AI as a tool to accelerate how work gets done — not replace it. We encourage thoughtful use of AI to improve speed, quality, and decision-making, while maintaining strong judgment, accountability, and data integrity.

Pay Range

$184,264.15 - $289,557.95

Compensation & Benefits:

At Quickbase, we believe in pay transparency and are committed to equitable pay practices.

Incentive Compensation

This role is eligible to participate in our annual incentive plan. Incentives are earned based on employee performance against defined metrics and company goals.

Benefits

Full-time roles are eligible for our comprehensive benefits program which includes medical, dental and vision coverage. You may also contribute to our 401(k) plan that includes a company match.

Equal Opportunity Statement

Quickbase is committed to building a diverse and inclusive workplace. We encourage candidates from all backgrounds to apply – even if you don't meet every qualification listed. We are proud to be an equal opportunity employer.