Security Architect

About Latacora

Latacora develops, grows, and maintains information security practices for tech-forward companies. We believe security is too broad and complex for one person to handle alone, so we give clients access to a team of specialists across application security, infrastructure security, detection and response, corporate security, risk and compliance, and security strategy. Our approach combines deep expertise with practical advice designed for the realities of growing companies.

About The Role

Latacora is looking for a Security Architect to serve as the technical security lead for a portfolio of clients. You’ll assess security programs, guide architecture and engineering decisions, build practical roadmaps, and connect clients with Latacora’s subject matter experts. Security Architects partner closely with Project Managers to coordinate client work and keep priorities moving. This is a client-facing role that requires both broad technical judgment and the ability to turn security risks into clear, achievable priorities.

What You’ll Do

• Assess new clients’ technology, security posture, and business risks, then develop a focused roadmap based on Latacora’s maturity model.

• Continuously update client roadmaps as their products, infrastructure, customers, and risks change.

• Review application, cloud, infrastructure, identity, and data architectures to identify risks and recommend practical controls.

• Advise clients on topics such as threat modeling, IAM, cloud security, vulnerability management, logging, incident readiness, endpoint security, and secure software development.

• Translate broad client questions and goals into clearly scoped initiatives and actionable technical recommendations.

• Coordinate with Latacora’s application security, infrastructure security, detection and response, corporate security, and risk and compliance specialists.

• Serve as a trusted technical contact for clients, communicating clearly with engineers, security teams, founders, and executives.

What We’re Looking For

• Broad experience across security disciplines, with meaningful depth in at least one area such as application or product security, cloud and infrastructure security, corporate security, detection and response, or risk and compliance.

• Experience reviewing technical designs, identifying meaningful attack paths and control gaps, and explaining the tradeoffs behind your recommendations.

• Familiarity with modern engineering and cloud environments, particularly areas such as AWS, IAM, APIs, CI/CD, containers, infrastructure as code, SaaS applications, and centralized logging.

• The ability to understand unfamiliar systems, ask productive technical questions, and recognize when deeper specialist expertise is needed.

• Experience working with startups or growing technology companies and recommending controls appropriate to their size, maturity, resources, and risk.

• Strong client-facing communication skills, including the ability to explain technical risks clearly to both engineers and business leaders.

• Sound judgment, strong written communication, and the ability to make and follow through on decisions while managing multiple clients and changing priorities.

You do not need to be an expert in every technology or security discipline. We value technical reasoning, practical judgment, curiosity, and the ability to work effectively with specialists.

Compensation & Benefits (US)

This is a remote role. Because a substantial portion of our team and clients is in US time zones, you’ll need consistent overlap with US working hours. We can hire anywhere in the United States and in a number of other countries.

For US applicants, the compensation range is $175,000–$200,000 USD, depending on experience.

US benefits include:

• 401(k): Dollar-for-dollar match up to the federal pre-tax contribution limit ($24,500 for 2026), with immediate eligibility and no vesting period. We also offer a Mega Backdoor Roth option, allowing for additional after-tax contributions and Roth conversions.

• Flexible vacation

• Paid sick leave for yourself or to care for family members.

• Paid parental leave: 12 weeks after one year of employment.

• Medical and military leave after one year of employment.

• Healthcare coverage: 100% of premiums covered for employees and their families, including domestic partners, plus employer HSA contributions for eligible plans.

Compensation, benefits, and employment arrangements outside the United States vary by location.

A Note On Applying

Security careers rarely follow a single path. If this role interests you but your experience does not align perfectly with every qualification, we still encourage you to apply. Tell us how your background, judgment, and perspective could contribute to the work.

Equal Employment Opportunity

Latacora is an equal opportunity employer. We consider qualified applicants without regard to race, color, religion, sex, pregnancy or related medical conditions, sexual orientation, gender identity or expression, national origin, age, disability, genetic information, protected veteran status, or any other characteristic protected by applicable law.

Accommodations

Latacora is committed to providing reasonable accommodations throughout the application and interview process. If you need an accommodation, please contact View email address on aiapply.co. Requests for accommodation will be handled confidentially and will not affect consideration for employment.

Please do not include passwords, financial information, medical information, or other highly sensitive personal data in your application.