3 months ago
Boston, MA, USASenior / Staff+
H1B sponsor
Base Salary
$155k - $195k/yr
Responsibilities
- Partner with engineering, product, infrastructure, IT, and security teams to incorporate security into software and system design.
- Establish and mature security architecture governance, review methodologies, standards, engagement models, and operating practices.
- Develop security principles, reference architectures, reusable design patterns, technical standards, and implementation guidance.
- Review application, cloud, infrastructure, AI, enterprise, vendor, and third-party technology initiatives for architectural risks and security controls.
- Lead architecture reviews and threat modeling covering trust boundaries, data flows, identity patterns, and secure service-to-service communications.
- Provide technical leadership across application, cloud, infrastructure, API, identity and access management, secrets, network, and data security.
- Translate HIPAA, PCI DSS, ISO 27001, SOC 2, and NIST requirements into practical engineering guidance and architectural controls.
- Mentor engineers and security team members and advise leaders on security, operational efficiency, and business objectives.
- Define the long-term Security Architecture vision, roadmap, success metrics, and secure-by-design culture.
Requirements
- 8–12+ years of experience in security architecture, application security, cloud security, infrastructure security, or senior security engineering roles.
- Experience designing and securing cloud-native applications and infrastructure, including strong knowledge of AWS security services and modern cloud architecture.
- Strong understanding of application security, secure software development, infrastructure security, cloud security, API security, identity and access management, enterprise networking, and security architecture principles.
- Previous software engineering or application development experience with knowledge of application design, architecture, implementation tradeoffs, and engineering workflows.
- Experience conducting architecture reviews, security design assessments, and threat modeling for complex distributed systems.
- Familiarity with healthcare, regulated environments, HIPAA, PCI DSS, ISO 27001, SOC 2, NIST 800-53, or similar frameworks.
- Ability to provide practical, risk-based recommendations and influence technical decisions across engineering, product, IT, and security organizations.
- Strong written, verbal, interpersonal, collaboration, judgment, and communication skills.
- Professional certifications such as CISSP, CCSP, AWS Certified Security – Specialty, GIAC, or TOGAF are preferred.
- Ability to work independently while establishing security processes, standards, governance models, and architectural practices.
Benefits
- U.S. base salary range of $155,000–$195,000, plus meaningful equity and benefits.
- Full-time role based in WHOOP’s Boston, Massachusetts office; relocation is required if necessary.
- Generous equity package and benefits are provided in addition to base salary.
- WHOOP is an Equal Opportunity Employer and participates in E-Verify.
About WHOOP
WHOOP builds a wearable health and performance tracker paired with an analytics app that measures sleep, recovery, and strain for athletes and health‑conscious consumers. Its business model combines device sales with a recurring membership that unlocks coaching features and insights. Founded in 2012 and headquartered in Boston, the privately held company also serves enterprise wellness programs and sports organizations seeking continuous performance monitoring.