{"id":2561807,"url":"https://alion.io/job/netbox-labs-security-architect","title":"Security Architect","company":{"id":4281,"name":"NetBox Labs","domain":"netboxlabs.com","url":"https://alion.io/company/netbox-labs","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":null},"role":"Security","role_family":"Security","seniority":"staff","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":[],"countries":[],"hiring_countries":["US"],"hiring_countries_total":1,"salary":{"min":210000,"max":230000,"currency":"USD","period":"year","gross":null,"usd_annual":230000},"salary_estimate":null,"experience_years_min":12,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"AWS","optional":false},{"name":"CI/CD","optional":false},{"name":"LLM","optional":false},{"name":"LLM Guardrails","optional":false},{"name":"Model Context Protocol","optional":false},{"name":"Python","optional":false},{"name":"SLI/SLO/SLA","optional":false},{"name":"Terraform","optional":false},{"name":"Threat Modeling","optional":false},{"name":"TypeScript","optional":false},{"name":"Zero Trust","optional":false},{"name":"Grafana","optional":true},{"name":"ISO 27001","optional":true},{"name":"SOC 2","optional":true}],"status":"live","first_seen_at":"2026-10-14T17:56:56Z","employer_posted_date":"2026-10-14","last_verified_at":"2026-10-15T16:14:19Z","board_verified":true,"closed_at":null,"days_open":1,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":1},"description":"NetBox Labs builds NetBox, the open source network source of truth, and the cloud and enterprise products built on it. We're hiring a hands-on Security Architect: a builder unleashed by AI, who designs and ships the systems that keep our products, our cloud, and our company secure as we grow.\nAI agents do most of the coding. You bring the judgment: what good looks like at scale, which outcomes matter, and when an agent's output is plausible but wrong. You own what ships and run it in production.\nMost of the role is Applied AI: building the platforms and paved paths that let teams across the company build their own automations, agent workflows, and software, secure by default, with identity, data access, and cost controls built in. You'll also work as a forward-deployed engineer, embedded with teams to get their first workflows running and turn what works into patterns. Success looks like teams building and running their own workflows on secure, pre-approved paths without waiting on a security review, and patterns you built being reused well beyond the team that first asked for them. The rest of the role is security engineering, with a focus on turning security from a review step into paved paths that engineering uses by default.\nYou'll report to the Director of Security & IT and work with Engineering, Product, Sales, Customer Success, and Finance.\nWhat you'll do\nMake secure AI adoption the easy path\nBuild and run the platforms that let teams across the company build their own automations, agent workflows, and software on a secure path by default, with the guardrails built in: pre-approved tools and connectors, scoped identities and credentials, authorization on data retrieval, approval for consequential actions, audit logging, and cost limits.\n\nLead enablement so teams can self-serve: templates, starter kits, and reference patterns that make the secure way the fastest way to build, plus the guidance and support to use them well.\n\nWork alongside teams outside Engineering on their first workflows, then turn what you build into patterns others pick up without you.\n\nSet evaluation criteria and quality gates for agent workflows built on the platform, covering accuracy, safe use of tools and data, and how they handle failure.\n\nAutomate security into how we build and ship\nBuild security into the SDLC and PDLC: threat modeling, secure design review, code scanning, secret detection, and supply-chain and CI/CD controls enforced in the pipeline.\n\nAutomate product and cloud security reviews so coverage keeps pace with delivery.\n\nAutomate vulnerability intake, prioritization, routing, and SLA escalation so the team works the highest-risk findings first.\n\nAutomate Security & IT operations\nBuild access automation as code, with just-in-time elevation for privileged access.\n\nSet multi-account AWS guardrails and reference architectures for identity, network, and data.\n\nRun what you build\nOwn the services you build end to end: CI/CD, deployment, monitoring, alerting, runbooks, and incident response. You'll join the Security & IT on-call rotation once the systems you own alert on failure. Internal platforms are supported during business hours.\n\nWhat you bring\n12+ years across security architecture, cloud infrastructure, and enterprise IT.\n\nYou've made architecture decisions that held up as companies grew, and you know what breaks first at scale.\n\nYou've recently built and run something other people depend on, by directing agents or otherwise: a product, a platform, or an internal tool. This role ships; it is not an oversight role.\n\nYou build with AI agents as your primary engineering tool. You specify the work, review what agents produce, and can tell code that runs from code that is secure and will hold up in production, across Python, Go, TypeScript, and Terraform.\n\nYou've shipped LLM or agent systems to production that people rely on. You can explain how you evaluated them, how they failed, and the controls they needed: tool and MCP governance, retrieval with access controls, approval steps, and cost limits.\n\nYou tie security work to product and business outcomes. You can explain the tradeoffs to an executive and hold your own in design reviews with senior engineers.\n\nDeep AWS experience: multi-account organizations, identity, network security, and infrastructure as code.\n\nZero Trust and identity architecture in practice, for both workforce and services: SSO, user provisioning, device management, and privileged access.\n\nProduct security depth: threat modeling, secure design review, supply-chain security, and SDLC automation with code scanning, dependency analysis, and secret detection.\n\nYou default to delivering everything as code: infrastructure, policy, detections, and controls.\n\nYou think in platforms. You'd rather give every team a secure way to build than build everything yourself, and you know what makes a platform people adopt by choice.\n\nYou can work with a sales or customer success lead, find the real problem behind the request, and deliver a workflow they keep using.\n\nNice to have\nSecurity architecture for a SaaS product.\n\nA regulated or high-trust background, or experience with compliance programs such as SOC 2 or ISO 27001.\n\nMulti-tenant SaaS security, including tenant isolation.\n\nExperience building detections and monitoring for the systems you own.\n\nExperience with a second cloud provider.\n\nHow we work\nSmall team. What you build runs in production and changes how Sales, Customer Success, and Finance work.\n\nWork ships behind alerting and runbooks, and the people who build it share on-call.\n\nAbout NetBox Labs:\nNetBox Labs helps companies build and manage complex networks. We help customers accelerate network automation by delivering open, composable products and supporting the network automation community.\nNetBox Labs is the commercial steward of open source NetBox, the world’s most popular network source of truth, and Orb, the next-generation open source network observability platform. Our products include NetBox Enterprise, a fully supported self-managed NetBox with advanced features, and NetBox Cloud, a secure, scalable, and reliable SaaS edition of NetBox.\nNetBox powers thousands of companies, and NetBox Labs is backed by investment from Notable Capital (formerly GGV), Grafana Labs CEO Raj Dutt, Flybridge, IBM, Salesforce Ventures, and Mango Capital.\nOur culture and values:\nWe own and solve problems with high attention to detail.\n\nOur open source contributors, users, customers & team are all part of our community. When our community wins, we win.\n\nWe prioritize simplicity and think twice before adding complexity\n\nClear communication helps keep our team aligned and collaborating smoothly.\n\nNetBox Labs is proud to be an equal opportunity employer. We believe diverse teams build better software, and we welcome applicants of every race, color, religion, gender identity, sexual orientation, national origin, age, disability, and veteran status. If you need accommodation at any point in the process, just let us know.","description_format":"text","description_chars":7042,"description_truncated":false,"requirements":{"experience_years_min":12,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["DevOps & Platform Engineering","IT Service & Asset Management"],"lifecycle":[{"event":"open","at":"2026-10-14T20:53:18Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 1","filings_12m":1,"filings_prev_12m":0,"green_card_filings_12m":0,"median_offered_wage_usd":207500,"route":null,"cap_exempt":false,"checked_at":"2026-10-15T11:24:14+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)"],"filings_for_role_12m":0}],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":0,"expected_fill_days":65,"reasons":["conf:1","velocity","win:early"],"computed_at":"2026-10-15T05:46:00Z"},"pay":{"stated_usd_annual":230000,"is_top_pay":true},"html_url":"https://alion.io/job/netbox-labs-security-architect","json_url":"https://alion.io/job/netbox-labs-security-architect.json","meta":{"generated_at":"2026-10-15T18:55:14Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":28662,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-16T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4281},"rest":"https://alion.io/mcp/rest/get_company?id=4281"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fnetbox-labs-security-architect"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fnetbox-labs-security-architect"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fnetbox-labs-security-architect"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/netbox-labs-security-architect\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fnetbox-labs-security-architect"}]}