SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
NetBox Labs is hiring a hands-on Security Architect to design and ship the systems that keep their products, cloud, and company secure as they scale. This is a builder role where you own what ships and run it in production.
The role has two primary focuses:
**Applied AI & Platform Security**: Build platforms and paved paths that enable teams across the company to create their own automations, agent workflows, and software with security built in by default. This includes pre-approved tools and connectors, scoped identities and credentials, authorization controls, audit logging, and cost limits. You'll lead enablement through templates, starter kits, and reference patterns that make the secure path the fastest path. You'll work as a forward-deployed engineer embedded with teams to get their first workflows running, then turn successful patterns into reusable solutions. You'll set evaluation criteria and quality gates for agent workflows covering accuracy, safe tool/data use, and failure handling.
**Security Automation & Operations**: Build security into the SDLC and PDLC through threat modeling, secure design review, code scanning, secret detection, and supply-chain/CI/CD controls. Automate product and cloud security reviews to keep pace with delivery. Automate vulnerability intake, prioritization, routing, and SLA escalation. Build access automation as code with just-in-time elevation for privileged access. Set multi-account AWS guardrails and reference architectures. Own the services you build end-to-end: CI/CD, deployment, monitoring, alerting, runbooks, and incident response, including on-call rotation.
You'll report to the Director of Security & IT and collaborate with Engineering, Product, Sales, Customer Success, and Finance.
**Requirements:**
- 12+ years across security architecture, cloud infrastructure, and enterprise IT
- Proven track record making architecture decisions that held up as companies grew
- Recently built and run something others depend on (product, platform, or internal tool)
- Build with AI agents as primary engineering tool; can specify work, review agent output, and distinguish secure production-ready code from plausible but wrong code across Python, Go, TypeScript, and Terraform
- Shipped LLM or agent systems to production; can explain evaluation, failures, and required controls (tool/MCP governance, retrieval with access controls, approval steps, cost limits)
- Tie security work to product and business outcomes; can explain tradeoffs to executives and hold your own in design reviews with senior engineers
- Deep AWS experience: multi-account organizations, identity, network security, infrastructure as code
- Zero Trust and identity architecture in practice: SSO, user provisioning, device management, privileged access
- Product security depth: threat modeling, secure design review, supply-chain security, SDLC automation
- Default to delivering everything as code: infrastructure, policy, detections, controls
- Think in platforms; prefer giving teams secure ways to build over building everything yourself
- Can work with sales/customer success leads to find real problems and deliver workflows they keep using
**Nice to Have:**
- Security architecture for SaaS products
- Regulated or high-trust background; experience with SOC 2 or ISO 27001
- Multi-tenant SaaS security and tenant isolation
- Building detections and monitoring for owned systems
- Experience with a second cloud provider
