Security Architect
Scottsdale, Arizona, United States
Plexus Worldwide
Clean wellness products and supplements to support weight loss, nutrition, skincare, and more. Plexus Worldwide - Founded in gut health. Experts in microbiome.We're hiring a Security Architect!
Plexus is seeking a Security Architect to champion the secure design, development, and deployment of software products. This performance-driven role is responsible for embedding security throughout the entire software development lifecycle (SDLC), ensuring Plexus products are built and maintained with the highest security standards. The Security Architect will lead threat modeling, security assessments, penetration test strategies, and compliance implementation efforts, while collaborating cross-functionally with engineering, DevOps, and leadership teams.
Employee Value Proposition
Join Plexus at a pivotal moment to build a security program from the ground up. You’ll have the opportunity to influence architecture decisions, shape security policies, and implement controls that will define the future of secure product development at Plexus.
Key Performance Objectives (KPOs)
Objective
Success Measure
Timeframe
Develop and implement a threat modeling framework
100% of critical software initiatives incorporate threat modeling within design phase
Within first 90 days
Execute and oversee penetration test plans
Documented test results for high-priority applications, with risk mitigation plans created
Within 120 days
Achieve compliance with applicable security standards
Demonstrated adherence to ISO 27001, NIST, or OWASP via internal audits
Within 6 months
Design and socialize reusable security design patterns
Patterns used across 80% of new development projects
Within 6 months
Integrate security into CI/CD and DevOps practices
Security gates in CI/CD, including automated SAST/DAST tools
Within 90–180 days
Essential Responsibilities and Deliverables
- Security Architecture & Design
- Develop and document scalable, secure architecture frameworks.
- Establish and publish secure design standards and reusable patterns.
- Lead architectural threat modeling for new and existing applications.
- Security Integration & Testing
- Drive security integration into all SDLC phases, including code, build, and release pipelines.
- Plan and execute penetration testing strategies, with results translated into prioritized remediation plans.
- Partner with security engineering to deploy SAST, DAST, and SCA tools in CI/CD.
- Compliance & Risk Management
- Ensure architecture aligns with compliance requirements (e.g., ISO 27001, OWASP, NIST).
- Define coding policies to meet regulatory standards and internal policies.
- Proactively identify and reduce security risks across the development ecosystem.
- Cross-Functional Collaboration & Leadership
- Work closely with software engineering, DevOps, IT, and data teams to implement secure coding practices.
- Mentor teams on secure design principles and current threat landscapes.
- Deliver security awareness and training programs to development staff.
Performance-Based Qualifications
- Education & Certification
- Bachelor’s in Computer Science, Cybersecurity, or equivalent experience.
- Preferred certifications: CISSP, CSSLP, CEH.
- Experience
- 10+ years in software development, security architecture, or application security roles.
- Proven success implementing security programs or frameworks from the ground up.
- Technical Skills
- Deep knowledge of authentication, encryption, IAM, secure APIs, and secure coding.
- Expertise in at least one modern language (Java, C#, JavaScript/TypeScript, Python, Node.js).
- Familiarity with DevSecOps, SAST, DAST, SCA tools, and container security (Docker/Kubernetes).
Experience integrating security tools into CI/CD pipelines and managing secrets securely.
About Plexus
Founded in gut health. Experts in microbiome. Plexus Worldwide®, headquartered in Scottsdale, Arizona, is a renowned direct-selling company recognized as a top employer. Over the past 16 years, Plexus has dedicated itself to promoting hope, health, and happiness through its scientifically backed, innovative dietary supplements, weight management and personal care products sold primarily through Plexus Brand Ambassadors. As a six-time Best Places to Work awardee, Plexus prides itself on its robust organizational culture and commitment to community support and philanthropy. Our team is driven by a shared mission to empower individuals to achieve their health and wellness goals while offering additional income through the sale of products. Join us to be part of a team that values people, innovation, wellness, and community impact.
Our Core Values
We contribute to the overall growth and success of Plexus by embracing the Plexus core values:
- We are One Plexus.
- We are accountable.
- We get the job done right.
- We empower others.
Benefits
- Highly rated and competitive medical plans.
- 401k with company match and immediate vesting.
- 1on1, personalized health coaching.
- Many other voluntary benefits.
Thank you for taking the time to apply for an opportunity with our One Plexus team! If you had any issues during the application process, please contact us directly at careers@plexusworldwide.com.
We are committed to protecting the privacy and security of your information. Visit our Candidate Privacy Notice for additional information.
#LI-DNI
* Salary range is an estimate based on our InfoSec / Cybersecurity Salary Index 💰
Tags: APIs Application security Audits C CEH CI/CD CISSP Compliance Computer Science CSSLP DAST DevOps DevSecOps Docker Encryption IAM ISO 27001 Java JavaScript Kubernetes NIST Node.js OWASP Pentesting Privacy Python Risk management SAST SDLC Security assessment TypeScript
Perks/benefits: 401(k) matching Career development Health care Startup environment Wellness
More jobs like this
Explore more career opportunities
Find even more open roles below ordered by popularity of job title or skills/products/technologies used.