Security Architect

Helps build WHOOP's Security Architecture function within Information Security, working with the Security Architecture Lead to define standards, review methods, reference architectures and reusable design patterns for engineering teams. The architect reviews application, cloud, infrastructure, AI and enterprise projects, leads threat modelling and design reviews covering trust boundaries, data flows, identity and service-to-service security, assesses strategic vendors, and turns HIPAA, PCI DSS, ISO 27001, SOC 2 and NIST requirements into practical engineering guidance while mentoring engineers. WHOOP wants eight to twelve or more years in security architecture or senior security engineering, deep AWS security knowledge, a software development background, and strong communication. CISSP, CCSP, AWS Security Specialty or TOGAF are pluses. On-site in Boston.