Security Architect (AI)

Location: Onsite at the WHOOP office in Boston, MA, United States; relocation to Boston is required if necessary.

Base salary: $155,000–$195,000 per year, plus benefits and equity.

Company

WHOOP develops wearable technology that provides personalized insights into training, recovery, lifestyle, and overall performance.

What you will do

• Conduct security architecture reviews across cloud platforms, applications, infrastructure, identity systems, and enterprise technologies.
• Perform threat modeling and security design assessments for web and mobile applications, APIs, cloud services, third-party integrations, and emerging technologies.
• Evaluate IAM, workload identities, authentication, authorization, network segmentation, secrets management, encryption, and data protection controls.
• Develop secure-by-default architecture patterns, reference designs, reusable controls, automated guardrails, and policy-as-code integrated into engineering workflows.
• Assess security implications of AI-assisted development, AI-enabled applications, and agentic technologies, including sensitive data, tools, identities, and permissions.
• Review penetration tests, vulnerability assessments, monitoring findings, and incidents to identify systemic weaknesses and provide practical technical guidance.

Requirements

• 7+ years of experience in cloud security, application security, or security architecture, including designing or evaluating secure systems.
• Strong technical expertise in cloud or application security architecture, identity, infrastructure, and modern software development practices.
• Experience conducting security architecture reviews, threat modeling, and technical risk assessments for complex systems.
• Ability to identify architectural risks independently, evaluate design tradeoffs, and recommend practical, scalable security solutions.
• Experience developing or implementing security controls, automation, or secure engineering practices in modern technology environments.
• Ability to evaluate system designs, technical documentation, and implementation approaches to identify security weaknesses.
• Strong communication and collaboration skills, with the ability to influence technical decisions across engineering and security teams.

Nice to have

• Hands-on software development, cloud engineering, or infrastructure engineering experience.
• Experience with secure-by-default architecture patterns, policy-as-code, or automated security controls.
• Familiarity with AI-assisted development, AI-enabled applications, agentic technologies, and their security implications.
• Experience across multiple security domains or with enterprise security architecture initiatives.
• Familiarity with NIST, ISO 27001, SOC 2, HIPAA, PCI DSS, or professional security certifications.

Culture & Benefits

• Full-time employment based in the Boston office.
• Benefits, a generous equity package, and competitive base salary.
• Equal Opportunity Employer participating in E-Verify for employment eligibility.
• Security Architecture work is performed collaboratively with Product Security, Platform Engineering, Software Engineering, IT, and Information Security teams.