About the role
AiPrise is hiring a Security Architect to own its security architecture end to end across infrastructure, applications, and APIs - a builder's role, not a paper one. You'll work shoulder to shoulder with engineers to find and fix real security issues, own the technical side of audits (SOC 2, ISO 27001), and represent security in customer-facing conversations with prospects and auditors.
What you'll do
Own the security architecture across cloud infrastructure, applications, and APIs, evolving it as the platform grows
Work directly with engineers to identify, prioritize, and remediate security issues, pairing on fixes
Perform threat modeling and security design reviews for new services and significant changes
Own the technical side of audits and assessments, including SOC 2, ISO 27001, and enterprise-customer security reviews
Represent security in customer-facing conversations - security questionnaires, due-diligence calls, trust discussions
What we're looking for
7 - 9+ years of relevant experience
7-9 years of experience in security engineering, security architecture, or a closely related field, with a track record securing production systems at scale
Genuine hands-on technical depth - able to read and reason about application code, cloud infrastructure, and API design
Strong command of cloud security - network segmentation, IAM, secrets and key management, workload and container security
Deep application and API security knowledge - access-control flaws, injection, SSRF, secure design patterns, secure SDLC
Solid understanding of SOC 2, ISO/IEC 27001, GDPR, and related regulatory frameworks
Nice to have
Experience in fintech, regtech, or identity verification domainsExperience handling personal or biometric identity data and associated privacy obligationsBackground in penetration testing, red teaming, or vulnerability researchRelevant certifications (CISSP, CCSP, OSCP, CIPP, CIPT)