Whoop
Security Architect
$155K–$195K
Boston, MA · On-site · Full-time · Posted Jul 27, 2026
- Experience
- 8–12+ years; no alternatives stated.
- Visa sponsorship
- The posting states WHOOP participates in E-Verify to determine employment eligibility.
About the job
Build and scale WHOOP’s Security Architecture practice, providing practical security guidance and standards across engineering, product, infrastructure, IT, and enterprise technology.
What you'll do
- Establish architecture governance, standards, reference architectures, reusable design patterns, and review processes.
- Review technology initiatives and lead threat modeling and architecture assessments, recommending practical risk mitigations.
- Advise and mentor teams, translate compliance requirements into engineering guidance, and help define the practice’s roadmap and operating model.
What they ask for
- 8–12+ years of experience in security architecture, application security, cloud security, infrastructure security, or senior security engineering supporting modern distributed systems.
- Experience designing and securing cloud-native applications and infrastructure, including deep knowledge of AWS security services.
- Previous software engineering or application development experience.
- Experience performing architecture reviews, security design assessments, and threat modeling for complex distributed systems.
Nice to have
- Familiarity with healthcare, regulated environments, or security programs involving HIPAA, PCI DSS, ISO 27001, SOC 2, NIST 800-53, or similar frameworks.
- Professional certifications such as CISSP, CCSP, AWS Certified Security – Specialty, GIAC, TOGAF, or equivalent.
Pay
$155,000 - $195,000 USD base salary
Tools
AWS, HIPAA, PCI DSS, ISO 27001, SOC 2, NIST 800-53, CISSP, CCSP
AI focus
Review AI initiatives to identify architectural risks, validate security controls, and recommend mitigations.
Model-written summary · the original posting is authoritative