[Hiring] Senior Director, Security Architect @Quorum Software

Role Description

The Security Architect is the senior technical authority for security across the software products, cloud platforms, data, and AI systems built and operated by Quorum’s Product, Innovation & Engineering (PIE) function. This is a hands-on architecture role.

• Define and drive the “build-side” security mandate.
• Set technical direction, produce reference architectures, threat models, and guardrails.
• Work closely with engineering teams to make the secure path the default path.

Responsibilities

• Application & Software Security
  • Own the secure SDLC: define and evolve security gates across design, build, and release.
  • Drive SAST, DAST, and SCA: select, integrate, and tune application- and dependency-scanning tooling in CI/CD.
  • Govern AI-generated code: establish review, provenance, and scanning controls.
  • Secrets management: architect enterprise-grade secret storage, rotation, and detection.
  • Partner on offensive testing: act as the technical counterpart for application pentests and red-team exercises.
• Cloud Infrastructure Security (Azure)
  • Secure the Azure landing zone: own the security architecture of subscriptions and network topology.
  • Policy-as-code & CSPM: codify guardrails to prevent misconfiguration.
  • Implement cloud IAM/PAM: operationalize enterprise standard for MFA and service-account hygiene.
• Product & Customer Data Security
  • Protect product and customer data: architect encryption and DLP controls.
  • Data classification & governance: embed classification within DaWinci.
  • Align to enterprise policy: implement product data protection consistent with CISO enterprise data policy.
• AI / ML Security & Governance
  • Secure the AI platform: own security architecture for AI Foundry workloads.
  • Defend against AI-specific threats: design controls for data leakage and model supply-chain risk.
  • Advise enterprise AI policy: inform the CISO/Legal-owned policy on data usage.
• Product Identity & Tenant Isolation
  • Own customer-facing identity: architect authentication and authorization for the products.
  • Guarantee tenant isolation: ensure robust multi-tenant separation.
• Incident Response, Compliance & Assurance
  • Detect and contain product/cloud incidents: build detection and forensics capability.
  • Provide audit evidence: generate and maintain product- and cloud-side evidence for compliance frameworks.
  • Advise on vendor risk: support security review of product-embedded vendors.
• And other duties as assigned.

Qualifications

• Substantial experience (typically 8+ years) in security engineering or architecture.
• Demonstrated ownership of security architecture for production SaaS/cloud products.
• Deep hands-on Azure security expertise.
• Proven secure-SDLC / DevSecOps practice.
• Strong grasp of cloud-native identity.
• Working command of compliance frameworks relevant to product assurance.
• Excellent communication and influence skills.

Requirements

• Practical experience securing AI/ML and agentic systems.
• Background serving the energy sector or other critical-infrastructure industries.
• Data-security depth in encryption and key management.
• Relevant certifications such as CISSP, CCSP, or Azure Security Engineer.

Additional Details

• Background Check: The successful candidate will need to successfully complete various clearances.
• Visa Sponsorship: Employment eligibility to work with Quorum Software in the United States is required.