Security Architect

Genspark

Genspark

IT

Palo Alto, CA, USA

Posted on May 12, 2026
Security Architect
Palo Alto
Engineering
In office
Full-time

About the Role

We sell to enterprises from mid-market to Fortune 500 and security is one of the primary reasons they choose us. You will architect the core security foundation of our program: protecting our infrastructure, securing our product, and building the compliance posture that closes deals. This is a build-from-scratch role, not a maintain-and-operate one.

What You'll Do

  • Contribute to the design and evolution of the security program (cloud infrastructure, product security, identity, and risk management).
  • Architect and implement the technical tooling and automation for incident response and forensics.
  • Lead compliance audits and security reviews; build the trust posture that enables enterprise sales
  • Embed security into the SDLC: threat modeling, design reviews, and pre-launch sign-offs
  • Set guardrails for cloud security, own IAM and Zero Trust principles across internal systems
  • Manage security vendors and tooling; own the signal, not just the subscriptions
  • Report on risk and posture to leadership; grow security culture across engineering

What We're Looking For

Required
1. Architecture & Engineering Foundation:
  • 4+ years in security engineering or architecture at a B2B SaaS or enterprise software company, with a strong engineering background and proven experience developing enterprise software or systems.
  • Strong written communication: translates technical risk into business language for customers and executives.
2. Product & Cloud Security Expertise:
  • Hands-on cloud security in (Azure/AWS/GCP): IAM design, network segmentation, CSPM tooling, security monitoring.
  • Experience securing multi-tenant SaaS: data isolation, RBAC/ABAC, API security.
  • Familiarity with security tooling across the stack: CSPM, SIEM, EDR, vuln scanning, secrets management.
  • Experience with AI/ML application security: prompt injection, data pipeline integrity, model API abuse.
3. Compliance & Customer Engagement:
  • Deep familiarity with major compliance frameworks (e.g. SOC 2, HIPAA, GDPR, ISO 27001) and proven experience contributing to the audit/certification process.
  • Comfortable serving customers with different compliance maturity, knows what a mid-market customer needs vs. a Fortune 500 security team.

Nice to have
  • Broader compliance exposure (ISO 42001, FedRAMP, PCI-DSS)
  • Prior experience as a founding security hire, comfortable building from a blank page
  • CISSP, CISM, CCSP, or a cloud security specialty certification

Why Join Us

  • You will design the security program from the ground up, the decisions you make now will shape the company's posture for years
  • Security is a direct revenue driver here, not a cost center, closing enterprise deals faster is a measurable outcome you own
Ready to apply?
Powered by
First name *
Last name *
Email *
LinkedIn URL
Phone number
Location
Resume *
Click to upload or drag and drop here
Cover letter
Click to upload or drag and drop here
Req ID: R38