Security Architect

Latacora develops, grows, and maintains information security practices for tech-forward companies. We believe security is too broad and complex for one person to handle alone, so we give clients access to a team of specialists across application security, infrastructure security, detection and response, corporate security, risk and compliance, and security strategy. Our approach combines deep expertise with practical advice designed for the realities of growing companies.

Latacora is looking for a Security Architect to serve as the technical security lead for a portfolio of clients. You’ll assess security programs, guide architecture and engineering decisions, build practical roadmaps, and connect clients with Latacora’s subject matter experts. Security Architects partner closely with Project Managers to coordinate client work and keep priorities moving. This is a client-facing role that requires both broad technical judgment and the ability to turn security risks into clear, achievable priorities.

• Assess new clients’ technology, security posture, and business risks, then develop a focused roadmap based on Latacora’s maturity model.

• Continuously update client roadmaps as their products, infrastructure, customers, and risks change.

• Review application, cloud, infrastructure, identity, and data architectures to identify risks and recommend practical controls.

• Advise clients on topics such as threat modeling, IAM, cloud security, vulnerability management, logging, incident readiness, endpoint security, and secure software development.

• Translate broad client questions and goals into clearly scoped initiatives and actionable technical recommendations.

• Coordinate with Latacora’s application security, infrastructure security, detection and response, corporate security, and risk and compliance specialists.

• Serve as a trusted technical contact for clients, communicating clearly with engineers, security teams, founders, and executives.

• Broad experience across security disciplines, with meaningful depth in at least one area such as application or product security, cloud and infrastructure security, corporate security, detection and response, or risk and compliance.

• Experience reviewing technical designs, identifying meaningful attack paths and control gaps, and explaining the tradeoffs behind your recommendations.

• Familiarity with modern engineering and cloud environments, particularly areas such as AWS, IAM, APIs, CI/CD, containers, infrastructure as code, SaaS applications, and centralized logging.

• The ability to understand unfamiliar systems, ask productive technical questions, and recognize when deeper specialist expertise is needed.

• Experience working with startups or growing technology companies and recommending controls appropriate to their size, maturity, resources, and risk.

• Strong client-facing communication skills, including the ability to explain technical risks clearly to both engineers and business leaders.

• Sound judgment, strong written communication, and the ability to make and follow through on decisions while managing multiple clients and changing priorities.

You do not need to be an expert in every technology or security discipline. We value technical reasoning, practical judgment, curiosity, and the ability to work effectively with specialists.

This is a remote role. Because a substantial portion of our team and clients is in US time zones, you’ll need consistent overlap with US working hours. We can hire anywhere in the United States and in a number of other countries.

For US applicants, the compensation range is $175,000–$200,000 USD, depending on experience.

US benefits include:

• 401(k) with a 1:1…