At WHOOP, we're on a mission to unlock and inspire performance for life. Our wearable technology provides personalized insights that help millions of members better understand their bodies, and make smarter decisions about training, recovery, and lifestyle.

WHOOP is seeking a hands-on Security Architect to help strengthen and scale security architecture across our technology environment. This role is an opportunity for an experienced security engineer or architect to expand their impact by shaping secure design practices, solving complex technical challenges, and helping engineering teams build secure systems at scale.

The ideal candidate brings strong technical experience in cloud security or application security, with demonstrated experience evaluating system architectures and making sound security design decisions. You don't need to have held the title of Security Architect or previously built an enterprise architecture program, but you should have the technical depth, judgment, and curiosity to identify architectural risks and develop practical solutions.

WHOOP operates a modern technology environment spanning cloud platforms, applications, and enterprise systems. As AI-assisted development accelerates how software is built, our approach to security architecture must evolve as well. We're looking for someone who can help move security beyond manual reviews by establishing reusable security patterns, integrating automated controls, and making secure design easier for engineering teams to adopt.

Working closely with the Security Architecture Lead, Product Security, Platform Engineering, Software Engineering, IT, and the broader Information Security organization, you'll contribute to the evolution of Security Architecture as an enterprise capability while remaining deeply engaged in hands-on technical work.

Responsibilities

Conduct security architecture reviews across cloud platforms, applications, infrastructure, identity systems, and enterprise technologies, identifying security risks and recommending practical mitigations.

Partner with Engineering, Product Security, Platform, and IT teams to incorporate security into system design, development, infrastructure provisioning, and deployment workflows.

Perform threat modeling and security design assessments for Web and Mobile applications, APIs, cloud services, third-party integrations, and new technologies, identifying attack paths, trust boundaries, and sensitive data flows.

Evaluate security controls across cloud and application environments, including IAM, workload identities, authentication, authorization, network segmentation, secrets management, encryption, and data protection.

Develop and promote secure-by-default architecture patterns, reference designs, and reusable security controls that enable engineering teams to implement consistent security practices.

Help translate security architecture requirements into automated guardrails, policy-as-code, and scalable security checks integrated into engineering and deployment workflows.

Collaborate with Engineering teams to identify opportunities to reduce repetitive manual security reviews through standardized designs, preventive controls, and risk-based review approaches.

Assess the security implications of AI-assisted software development, AI-enabled applications, and emerging agentic technologies, including access to sensitive data, tool integrations, identities, and permissions.

Apply automation and AI-assisted analysis where appropriate to improve the efficiency and consistency of architecture assessments and threat modeling, while maintaining appropriate human oversight.

Review findings from penetration tests, vulnerability assessments, cloud security monitoring, and incidents to identify systemic architectural weaknesses and recommend sustainable improvements.

Provide technical security guidance on new technologies, strategic integrations, and architectural changes, balancing security requirements with performance, scalability, and business needs.