Senior Security Architect

Location: Chicago, IL (Hybrid) or Bellevue, WA (Hybrid)

About the Role

As LogicGate continues to transform the GRC market, we are seeking a Senior Security Architect to lead the charge in securing our AI-driven solutions and tech stack. Reporting into the IST organization, you will solve critical business challenges by architecting defenses against emerging AI-specific threats and bridging any gaps in LogicGate’s security. You will serve as both a hands-on engineer and a strategic advisor, partnering closely with Engineering, Marketing, and GTM teams to ensure security is a business enabler. By shaping our security architecture, you'll empower LogicGate to innovate rapidly and securely, quantifying impact and building trust across the enterprise.

What You’ll Do

• AI Security Leadership: Serve as the subject matter expert on securing our AI stack - including agents, LLMs, and infrastructure - mitigating risks from attacks to support rapid, secure innovation.
• Cross-Functional Enablement: Partner directly with Engineering, Marketing, and GTM teams to assess new SaaS risks and guide teams in executing secure architectural patterns.
• Application Security Execution: Lead application security initiatives by integrating tools like GitLab Ultimate (SAST, DAST) to proactively identify and remediate vulnerabilities in the release lifecycle.
• Infrastructure Defense Strategy: Architect and secure AWS cloud environments utilizing Network Firewalls and Egress-Only VPCs to ensure robust protection of enterprise data.
• Operational Automation: Drive continuous security monitoring and SOC2/ISO evidence automation using tools like Wiz and Datadog to maintain our high standards of compliance with lean resources.
• Risk Communication: Articulate security trade-offs and document architectural decisions (via SBARs and ADRs) to help leadership balance risk mitigation with business agility.
• Incident Response Management: Triage security events (e.g., vendor incidents, IAM/SCIM access reviews) to quickly resolve vulnerabilities and maintain operational resilience.

What You Bring

Required:

• Information Security & AppSec Architecture: 7–10 years of progressive experience in security architecture or engineering, with demonstrated full-stack technical depth and a proven track record of establishing application security (AppSec) standards across modern SaaS environments.
• AI & Cloud Threat Modeling: Hands-on experience architecting and securing cloud environments (AWS preferred) and applying structured threat modeling methodologies to AI/ML stacks (agents, LLMs, MCP servers) to proactively mitigate adversarial risks.
• Security Tooling & Compliance Automation: Proven proficiency with modern cloud security, observability, and CI/CD policy tooling (such as Wiz, Datadog, and GitLab Ultimate SAST/DAST), including automating SOC 2 and ISO compliance evidence collection and driving SLA-governed vulnerability remediation.
• Cross-Functional Influence & Governance: Track record of partnering effectively across Engineering, Product, and GTM teams, articulating risk trade-offs with clarity and codifying architectural decisions using structured frameworks (such as Architecture Decision Records [ADRs] and SBARs).
• AI Literacy & Upskilling: Demonstrated curiosity and experience leveraging modern AI tools, LLMs, or automated workflows to enhance problem-solving and operational efficiency.
• Flexibility for On-Site Engagement: Willingness and ability to travel as needed for customer on-sites, team planning workshops, and company gatherings.

Nice to Have:

• Cloud & Security Certifications: Industry-recognized credentials such as AWS Certified Solutions Architect (Professional), AWS Certified Security – Specialty, AWS Certified Advanced Networking – Specialty, or CISSP.
• AI Security Frameworks & Community Contribution: Practical familiarity with emerging AI security standards (e.g., OWASP Top 10 for LLM/GenAI, MITRE ATLAS) or contributions to the security community through research, open-source tooling, or industry presentations.
• Program Building in Growth SaaS: Experience establishing or scaling a security architecture function from the ground up within a fast-paced, high-growth SaaS organization operating with lean resources.