Senior Director, Security Architect Remote

Senior Director, Security Architect

Location:
Houston, Texas (preferred) or United States - Remote

Model of Work:
Hybrid if located in Houston, TX or Remote with Travel if the work location is United States – Remote

Are you excited by challenges?

Do you enjoy working in a fast-paced, international and dynamic environment?

Then now is the time to join Quorum Software, a rapidly growing company and industry leader in oil & gas transformation.

Quorum Software is the world's largest provider of digital technology focused solely on business workflows that empower the next evolution of energy. From emerging companies to supermajors, throughout every region of the globe, customers rely on Quorum's proven innovation and unmatched global expertise to streamline business operations and make data-driven decisions that optimize profitability and growth. Our industry-leading solutions are transforming energy companies across the entire value chain, helping visionary leaders evolve their organizations into modern energy companies.

Overview

The Security Architect is the senior technical authority for security across the software products, cloud platforms, data, and AI systems built and operated by Quorum’s Product, Innovation & Engineering (PIE) function. As a global software company serving the energy industry, the products we ship help operate and optimize critical infrastructure worldwide — which makes security a foundational requirement, a recurring subject of rigorous customer assurance, and a competitive differentiator rather than an afterthought.

Operating at the intersection of engineering and security, the Security Architect defines and drives the “build-side” security mandate: secure software development, cloud infrastructure hardening on Azure, product data protection, customer-facing identity and tenant isolation, and the fast-emerging discipline of securing AI and agentic systems. The role owns architecture and implementation for everything PIE is accountable for, implements enterprise standards set by the CISO where the two intersect, and advises on adjacent corporate-security decisions — while deliberately staying out of the corporate IT security domains owned elsewhere.

This is a hands-on architecture role. The Security Architect sets technical direction, produces reference architectures, threat models, and guardrails, and works shoulder-to-shoulder with engineering teams to make the secure path the default path.

Responsibilities

• Own the secure SDLC: define and evolve security gates across design, build, and release — threat modeling, secure-by-design patterns, and paved-road guardrails that engineering teams adopt by default.
• Drive SAST, DAST, and SCA: select, integrate, and tune application- and dependency-scanning tooling in CI/CD, keeping signal high and friction low, and set the standards for triage and remediation SLAs.
• Govern AI-generated code: establish review, provenance, and scanning controls specifically for code produced with AI assistants, treating it as a first-class supply-chain and quality risk.
• Secrets management: architect enterprise-grade secret storage, rotation, and detection so credentials never live in source or pipelines.
• Partner on offensive testing: act as the technical counterpart for CISO-commissioned application pentests and red-team exercises, and own remediation of the findings within PIE.

• Secure the Azure landing zone: own the security architecture of subscriptions, network topology, private endpoints, and in-cloud segmentation for product and platform workloads.
• Policy-as-code & CSPM: codify guardrails (e.g., Azure Policy, Bicep/Terraform, Defender for Cloud) so misconfiguration is prevented at…