Principal Application Security Architect

Location: Remote USA. This role can be performed anywhere from the United States.

The Role

We are seeking a highly skilled and experienced Application Security Architect to join our cloud engineering team. As an Application Security Architect, you will play a critical role in ensuring the security and integrity of our organization's applications and systems. You will work closely with development teams, Infosec, and other stakeholders to design, implement, and maintain robust security measures, ensuring the protection of the APIs, web applications and customer sensitive data. GoPro is a global company with engineering teams in multiple locations, across different time zones. The ability and willingness to work with distributed teams across time zones is a key requirement for this role.

What You Will Do

• Security Architecture Design: Develop and maintain the security architecture for applications, including threat models, secure design patterns, and best practices.
• Security Assessment: Conduct security assessments and risk analysis for applications, identifying vulnerabilities and proposing mitigation strategies.
• Secure Coding Practices: Collaborate with development teams to promote secure coding practices, code reviews, and integration of security controls into the software development lifecycle.
• Security Standards Compliance: Ensure that applications adhere to industry standards and compliance requirements, such as OWASP, PCI DSS, and GDPR.
• Security Tools Integration: Implement and manage security tools, such as static and dynamic analysis, and vulnerability scanners, to continuously monitor and enhance application security.
• Security Awareness: Provide training and awareness programs for development teams to keep them informed about current security threats and best practices.
• Security Documentation: Maintain documentation of security policies, procedures, and guidelines, ensuring they are up to date and accessible to relevant teams.
• Collaboration: Collaborate with cross-functional teams, including infrastructure, and Information Security, to ensure a holistic approach to security.
• Emerging Threats Monitoring: Stay up to date with the latest security trends and emerging threats, adjusting security strategies accordingly.

Skills We’re Excited About

• Bachelor's or higher degree in Computer Science, Information Security, or related field.
• Proven experience (8+ years) in application security, including threat modeling, secure coding, and vulnerability assessment.
• Strong knowledge of application security standards, frameworks, and best practices (e.g., OWASP Top Ten).
• Experience with security assessment tools and methodologies.
• Familiarity with programming languages, web technologies, and cloud platforms.
• Excellent communication and collaboration skills.
• Strong experience related to some or most of the following areas:
  • Microservices Application Architecture
  • REST and GraphQL
  • Cloud platforms (AWS highly preferred)

Bonus Points For

• Industry certifications (e.g., CISSP, CSSLP, CEH) are a plus.

Why Work With Us?

Create your own destiny. GoPro enables you and trusts you to get your own job done, because we believe that autonomy in role brings out the best in our employees.

Live your best life. We’ve adopted remote and flexible work arrangements to support work at GoPro alongside our commitment to supporting employee wellbeing, belonging and connection with one another.

Work with leading edge technologies. We encourage employees to cultivate and use the latest and greatest technology, to provide the best solutions to serve our customers. We celebrate creative solutions that bring innovation to GoPro technology.

GoPro Highlights

• Get your very own GoPro camera + gear
• Medical, dental, and vision insurance – premiums are 100% paid for employees, 80% paid for dependents
• Life insurance and disability benefits
• Generous time off policy
• 12 weeks paid parental leave for new parents
• Pre-tax and Roth 401(k) options
• Discounted employee stock purchase plan (ESPP)
• LiveHealthy monthly wellness reimbursement
• Innovative remote-friendly wellness classes and events
• Flexible work arrangements
• Professional + personal development opportunities, i.e. LinkedIn Learning, technology trainings, certifications, Peer-to-Peer learning, conferences and more
• Opportunities to get involved in the causes that you care about (annual camera donation + volunteer events)

We strive for the day that no group can be described as underrepresented at GoPro – whether as part of our brand or in our workforce. We are committed to providing a more inclusive, representative, equal, just, and happy world. GoPro is proud to be an Equal Opportunity Employer.

The pay range for this role is between $154,700 - $242,075. Actual pay within the range is dependent on multiple factors, including your residence location and prior work experience. Equity, benefits, and a discretionary bonus may be additional forms of compensation for this role and are not included in the provided pay range.

#LI-Remote #flexible