Role overview

Benevity is a B Corporation that provides technology platforms enabling companies and their employees to engage in social action, giving, volunteering, and grantmaking. As a Security Architect, you will design and implement comprehensive security architectures and controls across products, infrastructure, and operations, working with engineering, IT, and compliance teams to protect the technology that powers corporate social good initiatives.

Key responsibilities

Architect, design, and implement secure systems for applications, infrastructure, and cloud environments including AWS and GCP, balancing scalability, performance, and cost optimization.
Develop and maintain architectural blueprints, standards, and secure design principles while providing expert guidance on security best practices to engineering teams.
Represent security perspectives in the Architecture Decision Record program and Architecture Review Board, reviewing security-relevant decisions and delivering actionable guidance to partners.
Conduct risk assessments and threat modeling for new and existing products and infrastructure, including High-Level Architecture proposals and major initiatives.
Implement security controls as code using tools like Terraform for cloud and edge protections, working with platform and DevOps teams.
Support technical security incident response including investigation, containment, and remediation efforts.
Develop and maintain security architecture standards, technical guidelines, and procedures aligned with industry best practices and regulatory requirements including NIST, ISO 27001, SOC 2, and GDPR.
Train and mentor engineering and security teams on security best practices and emerging threats.

Requirements

Bachelor’s or Master’s degree in Cybersecurity, Computer Science, or related field, or equivalent professional experience.
Six to eight or more years of experience in security architecture, security engineering, or security operations with a demonstrated focus on architecture and design.
Proven expertise in cloud security for AWS and GCP environments, with familiarity with other major cloud platforms.
Strong knowledge of identity and access management, encryption, firewalls, SIEM tuning, and endpoint detection and response solutions.
Hands-on experience with container security technologies like Docker and Kubernetes, infrastructure as code frameworks, and DevSecOps practices.
Proficiency with security frameworks including MITRE ATT&CK, CIS Controls, and Zero Trust Architecture concepts.
Strong scripting and automation capabilities using Python, PowerShell, or Bash, with experience mentoring engineers and security peers.

What makes this role worth considering

This position offers the opportunity to work on technology that directly supports corporate social responsibility and community impact at scale, serving most Fortune 100 brands. You’ll collaborate with cross-functional teams in a purpose-driven organization that operates globally across multiple continents, and the role includes a flexible hybrid work approach for those near company offices.