[All remote jobs](https://jobicy.com/jobs.md)[![NetBox Labs logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/df239a55-221.png)](https://jobicy.com/company/netbox-labs.md)[NetBox Labs](https://jobicy.com/company/netbox-labs.md) # Security Architect AI Summary NetBox Labs seeks a hands-on Security Architect to build and operate secure-by-default AI automation platforms and security engineering controls. The role combines applied AI platform development, cloud and product security architecture, and forward-deployed enablement for internal teams. Responsibilities include AWS guardrails, identity and access automation, secure SDLC controls, agent evaluation gates, and production ownership with on-call participation. The successful candidate will bring deep AWS, Zero Trust, SaaS security, infrastructure-as-code, and production LLM/agent-system experience, while communicating effectively with technical and business stakeholders.[Apply for this job](#job-application)[View company](https://jobicy.com/company/netbox-labs.md)ShareRemote from[USA](https://jobicy.com/job-region/usa.md)SalaryUSD 210k–230k / yrDepartment[Cybersecurity](https://jobicy.com/categories/cybersecurity.md)EmploymentFull TimeExperienceDirectorPublished5 Nov 2026Apply before5 Dec 2026Listing views64Application actions3Application toolkit ## Make your next move. Prepare your resume, explore your fit, and draft a cover letter for this opportunity. Opportunity details ## About this role. NetBox Labs builds NetBox, the open source network source of truth, and the cloud and enterprise products built on it. We’re hiring a hands-on Security Architect: a builder unleashed by AI, who designs and ships the systems that keep our products, our cloud, and our company secure as we grow. AI agents do most of the coding. You bring the judgment: what good looks like at scale, which outcomes matter, and when an agent’s output is plausible but wrong. You own what ships and run it in production. Most of the role is Applied AI: building the platforms and paved paths that let teams across the company build their own automations, agent workflows, and software, secure by default, with identity, data access, and cost controls built in. You’ll also work as a forward-deployed engineer, embedded with teams to get their first workflows running and turn what works into patterns. Success looks like teams building and running their own workflows on secure, pre-approved paths without waiting on a security review, and patterns you built being reused well beyond the team that first asked for them. The rest of the role is security engineering, with a focus on turning security from a review step into paved paths that engineering uses by default. You’ll report to the Director of Security & IT and work with Engineering, Product, Sales, Customer Success, and Finance. ### What you’ll do Make secure AI adoption the easy path * Build and run the platforms that let teams across the company build their own automations, agent workflows, and software on a secure path by default, with the guardrails built in: pre-approved tools and connectors, scoped identities and credentials, authorization on data retrieval, approval for consequential actions, audit logging, and cost limits. * Lead enablement so teams can self-serve: templates, starter kits, and reference patterns that make the secure way the fastest way to build, plus the guidance and support to use them well. * Work alongside teams outside Engineering on their first workflows, then turn what you build into patterns others pick up without you. * Set evaluation criteria and quality gates for agent workflows built on the platform, covering accuracy, safe use of tools and data, and how they handle failure. Automate security into how we build and ship * Build security into the SDLC and PDLC: threat modeling, secure design review, code scanning, secret detection, and supply-chain and CI/CD controls enforced in the pipeline. * Automate product and cloud security reviews so coverage keeps pace with delivery. * Automate vulnerability intake, prioritization, routing, and SLA escalation so the team works the highest-risk findings first. Automate Security & IT operations * Build access automation as code, with just-in-time elevation for privileged access. * Set multi-account AWS guardrails and reference architectures for identity, network, and data. Run what you build * Own the services you build end to end: CI/CD, deployment, monitoring, alerting, runbooks, and incident response. You’ll join the Security & IT on-call rotation once the systems you own alert on failure. Internal platforms are supported during business hours. ### What you bring * 12+ years across security architecture, cloud infrastructure, and enterprise IT. * You’ve made architecture decisions that held up as companies grew, and you know what breaks first at scale. * You’ve recently built and run something other people depend on, by directing agents or otherwise: a product, a platform, or an internal tool. This role ships; it is not an oversight role. * You build with AI agents as your primary engineering tool. You specify the work, review what agents produce, and can tell code that runs from code that is secure and will hold up in production, across Python, Go, TypeScript, and Terraform. * You’ve shipped LLM or agent systems to production that people rely on. You can explain how you evaluated them, how they failed, and the controls they needed: tool and MCP governance, retrieval with access controls, approval steps, and cost limits. * You tie security work to product and business outcomes. You can explain the tradeoffs to an executive and hold your own in design reviews with senior engineers. * Deep AWS experience: multi-account organizations, identity, network security, and infrastructure as code. * Zero Trust and identity architecture in practice, for both workforce and services: SSO, user provisioning, device management, and privileged access. * Product security depth: threat modeling, secure design review, supply-chain security, and SDLC automation with code scanning, dependency analysis, and secret detection. * You default to delivering everything as code: infrastructure, policy, detections, and controls. * You think in platforms. You’d rather give every team a secure way to build than build everything yourself, and you know what makes a platform people adopt by choice. * You can work with a sales or customer success lead, find the real problem behind the request, and deliver a workflow they keep using. ### Nice to have * Security architecture for a SaaS product. * A regulated or high-trust background, or experience with compliance programs such as SOC 2 or ISO 27001. * Multi-tenant SaaS security, including tenant isolation. * Experience building detections and monitoring for the systems you own. * Experience with a second cloud provider. ### How we work * Small team. What you build runs in production and changes how Sales, Customer Success, and Finance work. * Work ships behind alerting and runbooks, and the people who build it share on-call. ### About NetBox Labs: NetBox Labs helps companies build and manage complex networks. We help customers accelerate network automation by delivering open, composable products and supporting the network automation community. NetBox Labs is the commercial steward of open source NetBox, the world’s most popular network source of truth, and Orb, the next-generation open source network observability platform. Our products include NetBox Enterprise, a fully supported self-managed NetBox with advanced features, and NetBox Cloud, a secure, scalable, and reliable SaaS edition of NetBox. NetBox powers thousands of companies, and NetBox Labs is backed by investment from Notable Capital (formerly GGV), Grafana Labs CEO Raj Dutt, Flybridge, IBM, Salesforce Ventures, and Mango Capital. ### Our culture and values: * We own and solve problems with high attention to detail. * Our open source contributors, users, customers & team are all part of our community. When our community wins, we win. * We prioritize simplicity and think twice before adding complexity * Clear communication helps keep our team aligned and collaborating smoothly. NetBox Labs is proud to be an equal opportunity employer. We believe diverse teams build better software, and we welcome applicants of every race, color, religion, gender identity, sexual orientation, national origin, age, disability, and veteran status. If you need accommodation at any point in the process, just let us know. Show more [Apply now >](https://jobicy.com/jobs/159190-security-architect.md) * ![Upload CV](data:image/svg+xml;base64,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) ### Upload your resume now To unlock remote work opportunities and be discovered by global employers. This job listing has been manually reviewed by the Jobicy Trust & Safety Team for compliance with our posting guidelines, including verification of the company's legitimacy, accuracy of job details, clarity of remote work policy, and absence of misleading or fraudulent content. ## Role DNA A quick view of the complexity, pace, ownership and collaboration implied by the job description. ### Job Complexity 5/5EasyHard ### Pace & Pressure 5/5RelaxedFast-paced ### Autonomy Level 5/5GuidedFull ownership ### Communication Load 5/5IndependentCollaborative AI insightThis is a senior, highly technical architecture role requiring 12+ years of cross-functional security, cloud, AI-agent, and production engineering experience. The candidate must create durable security platforms, own operational outcomes, and make high-impact trade-offs independently. ## Salary analysis Estimated compensation compared with the broader US market for similar roles. Estimated job median (per year)Market rate$220,000US market range (per year)$200k–$260k0$286k AI insightThe employer explicitly lists a yearly base-pay range of $210,000–$230,000 USD, with a midpoint of $220,000. The estimated US annual market range for a senior hands-on security architecture role with AWS and AI-security specialization is $200,000–$260,000 USD. ## Core skills Skills and capabilities most closely associated with this opportunity. [Security architecture](https://jobicy.com/jobs?search_keywords=Security%20architecture.md)[AWS multi-account governance](https://jobicy.com/jobs?search_keywords=AWS%20multi-account%20governance.md)[Zero Trust](https://jobicy.com/jobs?search_keywords=Zero%20Trust.md)[Identity and access management](https://jobicy.com/jobs?search_keywords=Identity%20and%20access%20management.md)[Privileged access management](https://jobicy.com/jobs?search_keywords=Privileged%20access%20management.md)[Infrastructure as code](https://jobicy.com/jobs?search_keywords=Infrastructure%20as%20code.md)[Terraform](https://jobicy.com/jobs?search_keywords=Terraform.md)[Secure SDLC](https://jobicy.com/jobs?search_keywords=Secure%20SDLC.md)[Threat modeling](https://jobicy.com/jobs?search_keywords=Threat%20modeling.md)[Supply-chain security](https://jobicy.com/jobs?search_keywords=Supply-chain%20security.md)[CI/CD security](https://jobicy.com/jobs?search_keywords=CICD%20security.md)[LLM security](https://jobicy.com/jobs?search_keywords=LLM%20security.md)[AI agent governance](https://jobicy.com/jobs?search_keywords=AI%20agent%20governance.md)[Python](https://jobicy.com/jobs?search_keywords=Python.md)[Incident response](https://jobicy.com/jobs?search_keywords=Incident%20response.md) Sample interview questionsHow would you design a secure internal platform for teams building AI-agent workflows?I would provide approved connectors, scoped service identities, least-privilege retrieval controls, action approval gates, audit logs, cost limits, and reusable templates. I would also define evaluation criteria for correctness, tool safety, data handling, and failure behavior before workflows can be broadly adopted. Describe how you would implement AWS guardrails for a growing multi-account environment. I would establish an account-vending baseline with AWS Organizations, centralized identity, SCPs, logging, security monitoring, network patterns, encryption requirements, and infrastructure-as-code modules. Guardrails should be preventive where possible and paired with detective controls, clear exception processes, and automated remediation. How do you turn security reviews from a bottleneck into an engineering paved path? I would identify recurring review findings and encode the preferred patterns into templates, CI checks, policy-as-code, reference architectures, and self-service documentation. Teams should receive fast feedback in their delivery workflow, while security focuses on novel or high-risk exceptions. What controls are essential when deploying LLM or agent systems in production? Essential controls include authenticated and authorized data retrieval, narrowly scoped tool permissions, approval for consequential actions, prompt and output evaluation, observability, audit logging, rate and cost limits, and safe failure modes. Controls must be tested against realistic misuse and failure scenarios, not only nominal workflows. How would you prioritize vulnerability remediation across cloud, product, and internal systems? I would combine exploitability, asset criticality, exposure, data sensitivity, compensating controls, and active-threat intelligence into a risk-based queue. Automated intake, ownership routing, SLA escalation, and reporting would ensure that high-risk findings are handled quickly while lower-risk work is tracked transparently. Next step ## Apply now. Follow the employer’s application method and review Jobicy’s safety guidance before sharing personal information. Keep exploring ## Related remote jobs. * ![Spotify logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2021/03/Jobicy-210328105941-289246.jpg) Spotify Nov 5 New ### [Staff Engineer – Identity and Access Management User Platform](https://jobicy.com/jobs/159119-staff-engineer-identity-and-access-management-user-platform.md) The Platform mission creates the technology that enables Spotify to learn quickly and scale easily, enabling rapid growth in our users and our business around the globe. Spanning many disciplines,… * ![Keyfactor, Inc. logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/ba8ae349-221.png) Keyfactor, Inc. Nov 5 New ### [Senior Solutions Consultant](https://jobicy.com/jobs/159061-senior-solutions-consultant-3.md) About Keyfactor Our mission is to securely connect the world: humans, machines, and AI. Keyfactor is the leader in trust infrastructure for AI and machines, helping the world’s largest enterprises… * ![CertiK logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2021/03/Jobicy-210308091023-955845.jpg) CertiK Nov 5 New ### [Blockchain Security Expert – AI Track](https://jobicy.com/jobs/152451-blockchain-security-expert-ai-track.md) About the Company CertiK is the largest blockchain security auditor and provides a comprehensive suite of tools to secure the industry at scale. To date, CertiK has worked with over… * ![CertiK logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2021/03/Jobicy-210308091023-955845.jpg) CertiK Nov 5 New ### [Blockchain Security Engineer – Senior Level (Solidity / Rust / Golang )](https://jobicy.com/jobs/152447-blockchain-security-engineer-senior-level-solidity-rust-golang.md) About the Role: We are seeking a Senior Blockchain Security Engineer with a strong security mindset and deep technical expertise across smart contracts, blockchain nodes, and decentralized infrastructure. You will… * ![Brain Co. logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/08/b2bdd014-221.png) Brain Co. Nov 4 New ### [AI Application Security Engineer](https://jobicy.com/jobs/158889-ai-application-security-engineer.md) Our Mission Rebuild how the world works, to make institutions work better for the people they serve. About Brain Co. Brain Co. builds AI-native operating systems for large, regulated institutions…. * ![Liftoff logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/c47aea9f-221.png) Liftoff Nov 3 ### [Application Security Engineer, Generative AI](https://jobicy.com/jobs/158817-application-security-engineer-generative-ai.md) Liftoff is a leading AI-powered performance marketing platform for the mobile app economy. Our end-to-end technology stack helps app marketers acquire and retain high-value users, while enabling publishers to maximize… * ![Chainguard logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/e4b6aacf-221.jpeg) Chainguard Nov 3 ### [Security Analyst (Governance and Trust)](https://jobicy.com/jobs/158783-security-analyst-governance-and-trust.md) Chainguard is the trusted source for open source. By delivering hardened, secure, and production-ready builds of all the open source software engineers and AI agents rely on, Chainguard helps organizations… * ![Lightspeed Commerce logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/09/3d38005a-221.png) Lightspeed Commerce Nov 3 ### [Senior Engineer, Application Security](https://jobicy.com/jobs/158761-senior-engineer-application-security.md) Hi there! Thanks for stopping by 👋 Are you actively looking for a new opportunity? Or just checking the market? Well… you might just be in the right place! As… * ![Tenable logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/01879e02-221.jpg) Tenable Nov 3 ### [Senior Enterprise Security Engineer](https://jobicy.com/jobs/158725-senior-enterprise-security-engineer.md) Who is Tenable? Tenable® is the Exposure Management company. Over 40,000 organizations around the globe rely on Tenable to understand and reduce cyber risk. Our global employees support 65 percent… * ![Chainguard logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/e4b6aacf-221.jpeg) Chainguard Nov 3 ### [GRC Analyst (EMEA)](https://jobicy.com/jobs/158638-grc-analyst-emea.md) Chainguard is the trusted source for open source. By delivering hardened, secure, and production-ready builds of all the open source software engineers and AI agents rely on, Chainguard helps organizations… [Browse all jobs](https://jobicy.com/jobs.md)