Security Architect

Benevity is the way the world does good, providing companies (and their employees) with technology to take social action on the issues they care about. Through giving, volunteering, grantmaking, employee resource groups and micro-actions, we help most of the Fortune 100 brands build better cultures and use their power for good. We’re also one of the first B Corporations in Canada, meaning we’re as committed to purpose as we are to profits. We have people working all over the world, including Canada, Spain, Switzerland, the United Kingdom, the United States and more!

We are seeking a Security Architect to design and implement security architecture and controls across our products, infrastructure, and operations. The ideal candidate has a strong technical background in security architecture, security operations, product security, infrastructure security, and engineering. You will work cross-functionally with engineering, IT, and compliance teams to define security best practices and mitigate threats. This role supports Benevity’s mission to power purpose-driven businesses by securing the technology that enables companies to engage in social good and corporate giving. Additionally, you will play a critical role in ensuring the security resilience and trust of our products and services, safeguarding the integrity and reliability of the solutions we provide.

What you’ll do:

Secure Architecture Design and Implementation:

• Architect, design, and implement secure architectures for applications, infrastructure, and cloud environments (AWS and GCP preferred), considering scalability, performance, and cost optimization. Develop and maintain architectural blueprints and standards

• Define and champion secure design principles, reusable patterns, and standards across products and infrastructure. Provide expert guidance on secure architecture best practices

• Represent Security in the Architecture Decision Record (ADR) program and Architecture Review Board (ARB), reviewing security-relevant decisions and providing clear, actionable guidance to engineering and architecture partners

• Perform security reviews of High-Level Architecture (HLA) proposals, including threat considerations and control recommendations, and partner with product and platform teams to close findings

Risk Assessment and Threat Modeling:

• Conduct risk assessments and threat modeling for products and infrastructure, including for new and changing HLAs and major architectural initiatives

• Drive the adoption of security best practices and standards across the organization

• Champion security initiatives and promote a security-conscious culture

• Collaborate with product development and Product & Application Security teams to embed security into the SDLC (Software Development Lifecycle)

• Support technical security incident response efforts, including investigation, containment, and remediation

Security Policy and Standards Development

• Provide guidance on secure network, system, and cloud configurations

• Implement security controls as code (e.g., Terraform and related IaC) for cloud and edge protections such as WAF, in partnership with platform and DevOps teams

• Conduct vendor security architecture reviews for technologies that affect Benevity’s security posture

• Implement and oversee security monitoring, logging, and incident detection capabilities

• Evaluate and integrate security tools for endpoint, application, and cloud security

• Ensure compliance with industry regulations and standards such as NIST, ISO 27001, SOC 2, and GDPR

• Train and mentor engineering teams, and provide technical mentoring to the security team, on security best practices

• Develop and maintain security architecture standards, technical guidelines, and related procedures, integrating them seamlessly within the overall security architecture and aligning with industry best practices and regulatory requirements

What you’ll bring:

• Bachelor’s or Master’s degree in Cybersecurity, Computer Science, or a related field, can be substituted with relevant experience

• 6–8+ years of experience in security architecture, security engineering, or security operations, with a focus on architecture and design. Demonstrable experience mentoring engineers and security peers

• Expertise in cloud security (AWS and GCP preferred; familiarity with other major clouds a plus)

• Strong knowledge of identity and access management (IAM), encryption, firewalls, SIEM tuning, and EDR solutions

• Hands-on experience with container security (Docker, Kubernetes), infrastructure as code (e.g., Terraform), and DevSecOps practices

• Proficiency in security frameworks such as MITRE ATT&CK, CIS Controls, and Zero Trust Architecture

• Familiarity with penetration testing, vulnerability assessments, and forensics

• Strong scripting and automation skills in Python, PowerShell, or Bash

• Certifications such as CISSP, CISM, CEH, or AWS Security Specialty are a plus

• Experience working in highly regulated industries (e.g., finance, healthcare, government)

• Strong understanding of AI security risks and securing AI-enabled systems and workflows

• Experience with security automation and SOAR technologies, including SIEM tuning and response workflows

We’re not employees, we’re Benevity-ites. From all locations, backgrounds and walks of life, who deserve more …

Innovative work. Growth opportunities. Caring co-workers. And a chance to do work that fills us with a sense of purpose.

If the idea of working on tech that helps people do good in the world lights you up ... If you want a career where you’re valued for who you are and challenged to see who you can become …

It’s time to join Benevity. We’re so excited to meet you.

At Benevity, we embrace a flexible hybrid approach to where we work that empowers our people in a way that supports great work, strong relationships, and personal well-being. For those located near one of our offices, while there’s no set requirement for in-office time, we do value the moments when coming together in person helps us build connection and collaboration. Whether it’s for onboarding, project work, or a chance to align and bond as a team, we trust our people to make thoughtful decisions about when showing up in person matters most.

Diversity, equity, inclusion and belonging are part of Benevity’s DNA. You’ll see the impact of our massive investment in DEIB daily — from our well-supported employee resources groups to the exceptional diversity on our leadership and tech teams.

We know that diverse backgrounds, experiences, skills and passions are what move our business and our people forward, so we're committed to creating a culture of belonging with equal opportunities for everyone to shine.

That starts with a fair and accessible hiring process. If you want to feel seen, heard and celebrated, you belong at Benevity.

Candidates with disabilities who may require accommodations throughout the hiring or assessment process are encouraged to reach out to [email protected].