Security Architect Hybrid & Full-time We are looking for a Senior Security Architect to shape and strengthen security across Stibo DX products, platforms, and cloud services. You will join a small, senior architecture team at the center of Stibo DX's transformation from self-hosted and hybrid deployments to a standardized, cloud-native SaaS platform. facing teams, and legal to ensure security is built into our solutions by design, not added afterwards. You will turn security strategy and risk into practical architecture, reusable patterns, and controls that teams can implement. Your goal is to establish a consistent security architecture across Stibo DX and give teams clear standards, patterns, and guardrails to make secure architecture decisions. Early priorities will include establishing a security architecture baseline, identifying key security gaps across our SaaS platform, strengthening security architecture reviews and threat modelling, and defining reusable security patterns for engineering teams. The role is primarily focused on security architecture, product and platform security, and secure engineering practices. You will also drive the technical aspects of security governance and support compliance activities when needed, including security certifications, customer security requirements, regulatory obligations, risk assessments, policies, and audit preparation. You will work alongside peer architects covering Software, Platform/Infrastructure, and Data/Integration, reporting to the Director of Solution Architecture. Our governance model is based on minimum necessary control: decisions close to teams, with oversight proportional to risk and impact. Security remains a shared responsibility. The Senior Security Architect owns the security architecture direction, standards, patterns,



and cross?cutting guidance, while Software, Platform/Infrastructure, and Data/Integration architects continue to consider and address security within their respective domains. Engineering teams remain responsible for implementing and operating the required controls. Define security architecture strategy across Stibo DX products, platforms, and cloud services, including principles, standards, target architectures, guardrails, and roadmaps. into product discovery, solution design, delivery, and operation, working with teams early rather than reviewing security only at the end. Lead security architecture reviews and threat modelling Strengthen cloud and platform security for AWS, Kubernetes, networks, workloads, infrastructure as code, CI/CD, data, and shared SaaS platform capabilities. Define reusable security patterns and controls tenancy, tenant isolation, encryption, key management, logging, monitoring, vulnerability management, and secure configuration. Embed security in the software development lifecycle by defining practices and guardrails and helping teams integrate security into engineering practices, automation, architecture decision records, and delivery pipelines. Lead security governance and compliance work when needed including security policies, control design, risk assessments, evidence coordination, audit preparation, and remediation planning.



including customer security expectations, contractual commitments, privacy requirements, and relevant frameworks such as ISO *, SOC 2, GDPR, and CRA. Raise security maturity across Stibo DX 10+ years of experience across software engineering, cloud/platform engineering, or cybersecurity, with 4+ years in a senior security architecture or technical security leadership role. Proven experience designing and securing cloud-native, distributed, and microservices?tenant architectures, including tenant isolation, identity, data protection, and shared platform controls. Experience leading threat modelling, security architecture reviews, risk assessments, and remediation planning across multiple teams or product areas. Experience defining security standards, patterns, reference architectures, and governance that teams can apply in practice. Experience working with security and compliance frameworks and translating them into proportionate technical and organizational controls. Strong communication skills and the ability to influence engineers, architects, product leaders, operations, customers, legal, and senior stakeholders. Cloud security, preferably AWS, and Kubernetes/container security. driven security. Network security, workload protection, secrets management, encryption, certificates, and key management. Secure software development lifecycle, DevSecOps, infrastructure as code, CI/CD security, and software supply?chain security. Security logging, monitoring, detection capabilities, vulnerability management, and incident preparedness. Threat modelling, security risk analysis, Zero Trust, and defense?Experience leading or materially supporting ISO *, SOC 2, GDPR security controls, CRA, or similar init

📌 Senior IT Security Architect (España)
🏢 Stibo DX
📍 España