[Hiring] Senior Engineer, Information Security Architect @LOVESAC COMPANY

Role Description

The Information Security Architect and Sr. Engineer is a technical role responsible for designing, engineering, and evolving Lovesac’s information security architecture, platforms, and services while partnering closely with Enterprise Architecture, IT Operations, and technology teams across the organization. This role helps define the long-term security architecture vision, translates business and technology strategy into scalable security patterns and standards, and ensures information security capabilities are engineered and operated effectively as the business grows. This role balances strategic architecture leadership with hands-on engineering and platform execution.

This role is also responsible for both the cyber department’s footprint, including security platforms, tooling, integrations, automation, and control patterns—and for advising and supporting secure design across enterprise solutions. Working alongside Enterprise Architects, IT, and application teams, this role embeds security into application, cloud, data, infrastructure, and platform designs early in the lifecycle while also ensuring those designs are implemented, maintained, and optimized in practice. The position plays a critical role in shaping Lovesac’s security posture by standardizing controls, reducing architectural and operational risk, and enabling consistent, defensible security decisions across the enterprise.

This role ensures information security platforms are reliable, well-integrated, and aligned with approved designs, while helping Lovesac scale securely through a combination of strong architecture, disciplined engineering, and continuous improvement.

What You’ll Do

• Security Architecture Strategy, Design, and Engineering
  • Define and evolve the enterprise security architecture vision and roadmap.
  • Establish security architecture principles aligned with Zero Trust and industry frameworks.
  • Create and maintain security reference architectures, design patterns, and implementation standards.
  • Design and engineer security capabilities that support business growth, cloud adoption, and omnichannel operations.
  • Evaluate emerging technologies and recommend secure, operationally viable architectural approaches.
  • Provide architectural and engineering input into security platform selection, capability development, and modernization efforts.
• Security Platform Engineering and Operations
  • Engineer, configure, maintain, and optimize information security-owned platforms, including SIEM, SOAR, EDR, vulnerability management, EntraID, Data Loss Prevention, network security, AI security, and related security tools.
  • Perform routine platform administration, upgrades, health monitoring, and maintenance activities.
  • Ensure security platforms are properly configured, tuned, and operating in alignment with approved architectures and standards.
  • Troubleshoot platform issues and partner with vendors and internal teams to resolve incidents and service gaps.
  • Maintain configuration standards, technical documentation, and operational runbooks.
  • Support capacity planning, performance optimization, and long-term platform modernization initiatives.
• Enterprise Solution Architecture and Integration Support
  • Participate in enterprise architecture and solution design reviews for both cyber and non-cyber platforms.
  • Advise on secure design for applications, cloud services, data platforms, network-connected systems, and enterprise integrations.
  • Implement and maintain integrations between security platforms and enterprise systems.
  • Document data flows, trust boundaries, integration patterns, and security control placements.
  • Work with solution and application architects to balance security, usability, scalability, and operational effectiveness.
  • Ensure security requirements are clearly articulated, technically feasible, and consistently applied across projects.
• Automation, Detection, and Operational Enablement
  • Support automation and orchestration efforts to improve detection, response, and operational efficiency.
  • Assist with data ingestion, normalization, enrichment, and platform connectivity across security tooling.
  • Provide engineering support for Information Security department, including onboarding new detection use cases and response workflows.
  • Support incident response by ensuring platform data, integrations, and tooling are available and reliable.
  • Partner with threat intelligence, identity, ITSM, and incident response teams to operationalize new requirements.
  • Contribute to reducing manual effort through scripting, workflow integration, and response automation.
• Architecture Governance, Continuous Improvement, and Collaboration
  • Develop and maintain security architecture standards, guidelines, and approved implementation patterns.
  • Support governance processes, including design reviews, exception handling, and technical evidence for audits and assessments.
  • Ensure architecture and engineering decisions align with internal policies and external regulatory requirements.
  • Identify architectural gaps, operational inefficiencies, technical debt, and improvement opportunities.
  • Partner closely with Enterprise Architects, Information Security team members, and other IT teams to align roadmaps and delivery priorities.
  • Continuously refine standards, platforms, and engineering practices based on threat evolution, business change, and operational lessons learned.

Qualifications

• A senior security professional who is equally comfortable designing architecture and building or maintaining platforms.
• Comfortable influencing without authority and operating in a matrixed, cross-functional environment.
• Able to translate complex security concepts into clear architectural guidance and practical engineering outcomes.
• Detail-oriented, with strong documentation, design communication, and operational discipline.
• Able to troubleshoot complex systems, assess risk thoughtfully, and work through issues methodically.
• Passionate about building secure, scalable, reliable systems that enable the business.

Requirements

• Bachelor’s degree in information security, Computer Science, or related discipline (or equivalent experience) required.
• CISSP, CISM, Security+, GCED, GCIH, or equivalent security certification; cloud, networking, or vendor-specific platform certifications required.
• 5-8 years of experience in security engineering or security operations roles.
• Demonstrated experience designing and implementing security architectures for cloud, SaaS, enterprise, and distributed environments and hands-on experience administering security platforms such as SIEM, EDR, and vulnerability management tools.
• Experience participating in or leading architecture and design review processes.
• Strong background collaborating with enterprise architecture, IT, application, and security operations teams.
• Experience supporting SOC operations and incident response tooling.
• Familiarity with cloud and SaaS-based security platforms.
• Familiarity with network operations and network security platforms.
• Experience operating in an enterprise or distributed environment preferred.
• Solid understanding of security architecture concepts, including Zero Trust, defense-in-depth, and secure-by-design.
• Working knowledge of security monitoring, endpoint protection, and vulnerability management.
• Experience with platform integration and API-based data ingestion.
• Familiarity with automation and scripting (e.g., PowerShell, Python).
• Ability to develop and implement approved architectural designs.
• Ability to assess architectural risk and recommend appropriate controls.
• Familiarity with security and privacy frameworks such as NIST CSF, ISO, HIPAA, GDPR, CCPA, COBIT, etc.
• Exemplify each of our Lovesac values, at all times, be results driven and utilize knowledge to meet or exceed key performance indicators (KPIs), goals and deadlines.
• Must be able to travel using various forms of transportation, as required by the Company in its sole discretion, for mandatory meetings and conferences held either at our offices or offsite (i.e. quarterly team connection weeks, companywide meetings and events, vendor visits).
• Must comply with all policies and procedures outlined in the Lovesac Employee Handbook and work collaboratively with fellow employees, treating all clients, both internal and external with dignity and respect at all times.

Benefits

• Financial Benefits: Annual Bonus Program, Inaugural Grant Equity Awards, 401K Matching Contribution, Financial Wellness Tools.
• Health and Wellness Benefits: Medical, Dental, Vision, Health Savings and Flexible Spending Accounts, Paid Parental Leave, Life/AD&D, Short Term and Long-Term Disability, Critical Illness and Accident Insurance, Employee Assistance Program.
• Paid Time Off: Up to 160 hours of paid time off within our fiscal calendar year, prorated from date of hire, 8 paid company recognized holidays.
• Pet Insurance and generous Associate Discounts.