Software Security Architect

We're hiring a Software Security Architect!

Plexus is seeking a Software Security Architect to champion the secure design, development, and deployment of software products. This performance-driven role is responsible for embedding security throughout the entire software development lifecycle (SDLC), ensuring Plexus products are built and maintained with the highest security standards. The Security Architect will lead threat modeling, security assessments, penetration test strategies, and compliance implementation efforts, while collaborating cross-functionally with engineering, DevOps, and leadership teams.

Employee Value Proposition

Join Plexus at a pivotal moment to build a security program from the ground up. You’ll have the opportunity to influence architecture decisions, shape security policies, and implement controls that will define the future of secure product development at Plexus.

Key Performance Objectives (KPOs)

Objective

Success Measure

Timeframe

Develop and implement a threat modeling framework

100% of critical software initiatives incorporate threat modeling within design phase

Within first 90 days

Execute and oversee penetration test plans

Documented test results for high-priority applications, with risk mitigation plans created

Within 120 days

Achieve compliance with applicable security standards

Demonstrated adherence to ISO 27001, NIST, or OWASP via internal audits

Within 6 months

Design and socialize reusable security design patterns

Patterns used across 80% of new development projects

Within 6 months

Integrate security into CI/CD and DevOps practices

Security gates in CI/CD, including automated SAST/DAST tools

Within 90–180 days

Essential Responsibilities and Deliverables

• Security Architecture & Design
• Develop and document scalable, secure architecture frameworks.
• Establish and publish secure design standards and reusable patterns.
• Lead architectural threat modeling for new and existing applications.
• Security Integration & Testing
• Drive security integration into all SDLC phases, including code, build, and release pipelines.
• Plan and execute penetration testing strategies, with results translated into prioritized remediation plans.
• Partner with security engineering to deploy SAST, DAST, and SCA tools in CI/CD.
• Compliance & Risk Management
• Ensure architecture aligns with compliance requirements (e.g., ISO 27001, OWASP, NIST).
• Define coding policies to meet regulatory standards and internal policies.
• Proactively identify and reduce security risks across the development ecosystem.
• Cross-Functional Collaboration & Leadership
• Work closely with software engineering, DevOps, IT, and data teams to implement secure coding practices.
• Mentor teams on secure design principles and current threat landscapes.
• Deliver security awareness and training programs to development staff.

Performance-Based Qualifications

• Education & Certification
• Bachelor’s in Computer Science, Cybersecurity, or equivalent experience.
• Preferred certifications: CISSP, CSSLP, CEH.
• Experience
• 10+ years in software development, security architecture, or application security roles.
• Proven success implementing security programs or frameworks from the ground up.
• Technical Skills
• Deep knowledge of authentication, encryption, IAM, secure APIs, and secure coding.
• Expertise in at least one modern language (Java, C#, JavaScript/TypeScript, Python, Node.js).