Job Description
Job DescriptionCompany Description
About CyberArk:
CyberArk (NASDAQ: CYBR), is the global leader in Identity Security. Centered on privileged access management, CyberArk provides the most comprehensive security offering for any identity – human or machine – across business applications, distributed workforces, hybrid cloud workloads and throughout the DevOps lifecycle. The world’s leading organizations trust CyberArk to help secure their most critical assets. To learn more about CyberArk, visit our CyberArk blogs or follow us on X, LinkedIn or Facebook.
Job Description
As a Senior Security Architect within our Engineering Security Architecture team, you will play a pivotal role in shaping, enhancing, and maintaining the security posture of our organization.
You will partner closely with Engineering (Development and SRE) teams to integrate security into every stage of the software development lifecycle (SSDLC), ensuring our products and systems are secure, resilient, and built with security by design.
As a senior member of the Engineering Security team within Engineering Security, you will be part of a diverse, cross-company group continuously raising the security bar across Engineering. You will provide hands-on technical guidance, architectural oversight, and strategic leadership to Engineering and Product Management, helping define and prioritize secure product development and operational practices.
This role requires a technically strong, collaborative, and visionary security leader - someone who combines deep architectural expertise with practical implementation skills and a passion for mentoring, scaling influence, and driving measurable security improvements across engineering.
Responsibilities
-
Partner with Engineering (Dev and SRE) teams to embed security throughout the SSDLC, including threat modeling, secure design reviews, secure coding practices, and CI/CD pipeline security integration.
-
Identify and lead cross-engineering security improvement initiatives, driving enhancements in SSDLC processes, tooling, and automation.
-
Serve as a trusted security advisor to engineering leadership and product teams, influencing architectural decisions and long-term technology strategy.
-
Design and guide security for AI and ML systems, ensuring safe model integration, data protection, and alignment with emerging AI security standards.
-
Define, promote, and evolve cloud security architectures and cross-company security best practices.
-
Establish and maintain secure development standards and provide hands-on support in applying them to critical systems.
-
Oversee and participate in threat modeling, design, and code reviews, ensuring security is a built-in aspect of engineering excellence.
-
Deliver training, mentorship, and security awareness sessions to strengthen security capability across teams.
-
Support product incident response and drive post-incident improvements.
-
Continuously learn and explore new technologies, security domains, and emerging threats to strengthen architectural and operational resilience.
-
Continuously review and update security policies, architecture principles, and standards to align with evolving threats and business goals.
#LI-HA1
Qualifications
- 6+ years in software development and 5+ in security, including 3+ in a security architecture or technical leadership role.
- Strong engineering background with hands-on experience that informs secure design, threat modeling, and risk analysis.
- Proven record partnering with Dev and SRE teams to embed and scale security across products and platforms.
- Deep knowledge of SSDLC, secure coding, and cloud security (AWS preferred).
- Experience designing and assessing security for AI and ML systems, including data protection, model integrity, and emerging AI security standards.
- Expertise in threat modeling, risk management, and secure architecture reviews (STRIDE, PASTA, or equivalent).
- Demonstrated ability to lead cross-functional initiatives and drive security adoption at scale.
- Familiar with key frameworks (OWASP, NIST, CSA).
- Strong business and technical judgment - able to balance security, speed, and innovation.
- Excellent communication and leadership skills; fluent in English.
- Practical experience with security tools, infrastructure, and cloud-native technologies.
Preferred Qualifications
- Experience working with or supporting FedRAMP-compliant systems and processes.
- Experience presenting or contributing to the security community (e.g., conferences, blogs, open source).
- Practical knowledge of security testing and research.
- Experience driving security maturity programs in Agile or DevSecOps environments.
- Proven track record of mentoring and developing engineers in secure design and development.
Additional Information
CyberArk is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, creed, sex, sexual orientation, gender identity, national origin, disability, or protected Veteran status.
We are unable to sponsor or take over sponsorship of employment Visa at this time.
The salary range for this position is $150,000 – $220,000/year, plus commissions or discretionary bonus, which will be based on the employee’s performance. Base pay may also vary considerably depending on job-related knowledge, skills, and experience. The compensation package includes a wide range of medical, dental, vision, financial, and other benefits.