The ideal candidate is highly professional, demonstrates a can-do attitude, and brings the seniority and presence to engage R&D architects and senior stakeholders as a peer. You will need strong technical depth, excellent communication skills, and the ability to translate complex security considerations into clear business and engineering decisions across a diverse range of stakeholders.
What you'll do:
Drive cross-PR&D alignment of the Secure Software Development Lifecycle (SSDLC), establishing consistent standards, controls, and practices across all engineering groups.
Lead complex security design reviews for new technologies, systems, services, and strategic cross-tech initiatives.
Define and own the security architecture for high-impact cross-team initiatives, ensuring security is embedded from the earliest design stages.
Serve as the security counterpart to PR&D architects- representing security in architecture forums, design discussions, and strategic technology decisions.
Partner with DevOps, Infrastructure, Platform, and R&D teams to integrate security into CI/CD pipelines, infrastructure-as-code, and shared platform services.
Perform threat modeling and architectural risk assessments to identify and mitigate weaknesses before they reach production.
Develop and maintain security guidelines, reference architectures, and best practices that scale across the organization.
Evaluate and recommend security tools and technologies to continuously strengthen AppsFlyers security posture.
Stay current on emerging threats, vulnerabilities, and architectural patterns, translating them into actionable improvements to our security strategy.
What you have:
7+ years of experience in security architecture, cloud/infrastructure security, application security, or DevSecOps roles.
Proven experience leading security design reviews and architecture work across multiple R&D teams or domains.
Strong understanding of SSDLC practices and how to scale them across a large engineering organization.
Deep knowledge of cloud-native architecture and services (AWS, GCP).
Hands-on experience securing CI/CD pipelines, containers, and infrastructure-as-code (e.g., Terraform, Kubernetes).
Deep knowledge of network and identity security concepts, such as zero trust, IAM, and secrets management.
Proven experience working with product and R&D teams performing architecture.
Experience working in a SaaS product company at scale.
Excellent communication skills, with the ability to translate complex technical risks into clear business impact and to influence senior R&D stakeholders.
A proactive mindset, strong problem-solving ability, and a passion for designing secure, scalable systems.
Strong collaboration skills and the ability to drive change across cross-functional teams.
Bonus Points:
Experience in high-scale distributed SaaS environments.
Certifications such as GCP or AWS Certified Security Specialty, OSCP or OSWE- Advantage
Being introduced by an AppsFlyer team member.
