Security Architect, WHOOP
4 days a week in office
Wearable health and fitness devices
Open for applications
Wearable health and fitness devices
501-1000 employees
Open for applications
4 days a week in office
501-1000 employees
Company mission
To unlock human performance by helping people find their inner potential.
Role
Who you are
- The ideal candidate will have the right mix of skills, which include effective communication of complex security concepts to various stakeholders, a strategic mindset, deep technical expertise, and the ability to balance risk management with hands-on implementation and operational excellence
- 10+ years of experience in information security, with at least 3 years in a security architecture role
- Proficiency in securing multi-cloud environments, identity and access management (IAM), zero-trust architectures, and security automation
- Expertise in developing and maintaining cybersecurity standards, mapping and tailoring controls, and overseeing security metrics to ensure alignment with security objectives and compliance requirements
- Proficient knowledge of security frameworks (i.e. ISO27001, NIST Cybersecurity Framework (CSF), PCI DSS, COBIT, MITRE ATT&CK, STRIDE, NIST SP 800-53, CIS Benchmarks), compliance standards (i.e. GDPR, CPRA), and best practices
- Experience with security technologies, such as firewalls, WAFs, SIEM, CASB, CSPM, IPS, SWG, CNAPP, SCA, SAST, DAST, and endpoint protection tools
- Hands-on experience with cloud platform security (AWS, Azure, or GCP) and PaaS platforms.
- Strong analytical and problem-solving skills, with the ability to work effectively under pressure
- Exceptional verbal and written communication skills to articulate complex security concepts to technical and non-technical stakeholders
- Preferably one or more security industry certifications, such as CISSP, CISM, GSEC, CCSK, CCSP, CEH or other relevant industry certifications
- Familiarity with emerging security technologies such as AI/ML-based threat detection
- Ability to respond to security incidents after hours
- Ability to work on premise from our Boston Headquarters 4 days per week
What the job involves
- The Security Architect will be key in developing and implementing a robust security posture that aligns with business objectives
- Reporting to the CISO, this role will provide cybersecurity expertise to internal and external stakeholders while moving a high-value threat informed security strategy across the organization
- The successful candidate will promote a 'secure-by-design' approach, working with teams to deliver on best practices and maintain evolving security protections
- Build and evolve a strong security architecture that is fitting with industry best practices (i.e. NIST, ISO 27001, CIS Controls) and business goals
- Conduct regular security assessments, vulnerability analyses, and threat modeling to identify and mitigate risks across the organization
- Design and enforce security configurations for on-premises and cloud environments (i.e. AWS, Azure, GCP), ensuring compliance with regulatory requirements
- Provide strategic guidance and oversight during critical security incidents, serving as a key decision-maker and escalation point for complex and potentially high-impact events
- Evaluate, implement, and optimize security tools and endpoint protection to enhance threat detection and response capabilities
- Collaborate with business units and cross functional teams to gather security requirements and ensure the effective implementation of controls and enhance secure architectures for established enterprise platforms and business-critical systems
- Recommend and help implement changes to the enterprise security ecosystem, including policies, practices, and tools, to mitigate security challenges and improve the overall security posture
- Partner with cross-functional teams to integrate security into operational workflows
- Partner with application development teams to integrate security into all stages of the Software Development Lifecycle (SDLC) by utilizing appropriate tools and methodologies, while training and coaching development teams on secure coding practices to foster a culture of security within engineering
- Collaborate with the CISO to develop security roadmaps aligned with business objectives and security principles
- Serve as a key technical advisor and advocate for enhanced security across the organization, collaborating with business units and stakeholders to ensure the effective implementation of security best practices, drive continuous improvement, and enhance the overall security posture
- Create, maintain, and communicate appropriate architecture diagrams and technical documentation (e.g., configuration guides, operational procedures) to support the security architecture and transition operational responsibilities of new security tools and processes to appropriate teams
- Support the GRC team in Third Party Security Assessments to evaluate feasibility, integrations, and ensure secure implementation of solutions
- Stay updated on emerging security trends, technologies, and regulations
Our take
WHOOP develops wearable health-tracking devices designed to help athletes optimise their performance. Its technology continuously monitors recovery, sleep, and training hours to fine-tune both individual and team performance. Unlike competitors that primarily track exercise data, WHOOP's holistic approach includes metrics like heart rate variability, which can influence more effective and healthier exercise routines.
By focusing on a subscription model that includes the cost of the physical device, WHOOP differentiates itself from competitors that charge a higher one-time fee for their products. This model provides ongoing value and encourages users to stay engaged with their health data.
WHOOP's comprehensive monitoring of strain and recovery has given it a competitive edge, even as other brands like Fitbit have incorporated similar features. Beyond sports performance, WHOOP has conducted extensive research on predicting premature births, aiming to integrate these findings into their app. This commitment to broader health applications demonstrates WHOOP's dedication to advancing wearable health technology.
Steph
Company Specialist at Welcome to the Jungle
Insights
Company
Funding (last 2 of 8 rounds)
Aug 2021
$200m
SERIES F
Oct 2020
$100m
SERIES E
Total funding: $404.8m
Company benefits
- TAKE TIME OFF: Our PTO plan encourages members to take time off in order to come back refreshed.
- LIVE A HEALTHY LIFESTYLE: Our benefits package includes premium medical, dental, and vision coverage for employees and their dependents. Life and disability insurance are also available.
- FEEL INVESTED: 401k and stock options to share in the future of WHOOP.
- EAT WELL: Keep hunger at bay with endless snacks in our fully stocked kitchen. Enjoy catered team lunches on Friday, and even a cold brew keg.
- KNOW THE PRODUCT: We offer you a WHOOP strap and membership at no cost.
- BE ACTIVE: Take advantage of our office gym and on-site showers, as well as a $500yearly wellness perk for fitness classes and memberships.
- BE PRESENT: Take care of your loved ones with 12 weeks paid parental leave, plus an additional 2 weeks to gradually return to work.
- LOVE WHERE YOU WORK: Sitting in the heart of Fenway, our beautiful office overlooks Fenway Park. A prime location for great food, not to mention catching a Sox game, too!
- WORK HARD, PLAY HARDER: If we don't already have a club here that fits your lifestyle and interests, you're encouraged to start one. Share your passions with others at work, or discover new ones!
Company values
- Our work is grounded in research, design, and privacy
- At WHOOP, the best idea wins
- We have a bias for action
- We operate at the intersection of high intensity and high humility
- Our differences are a source of strength
- We are obsessed with the member experience
Company HQ
West Fens, Boston, MA
Articles
Leadership
Will Ahmed
(CEO)Studied at Harvard. Worked as a Summer Analyst at Allen & Company and at Lindsay Goldberg. Founded Whoop in their final year.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Diversity, Equity & Inclusion at WHOOP
- Under the umbrella of Inclusivity & Belonging, WHOOP operates a number of Employee Resource Groups (ERGs), including; Black at WHOOP, WHOOP GOOP (LGBTQ+), Women of WHOOP, Veterans & Military personnel, Adapt (Abled & Disabled Allies Partnering Together), and Wise (Women In Science & Engineering) .
Share this job
View 25 more jobs at WHOOP