At Varicent, we’re not just transforming the Sales Performance Management (SPM) market—we’re redefining how organizations achieve revenue success. Our cutting-edge SaaS solutions empower revenue leaders globally to design smarter go-to-market strategies, maximize seller performance, and unlock untapped potential. Varicent stands at the forefront of innovation, celebrated as a market leader in the 2025 Forrester Wave Report for SPM , 2023 Ventana Research Revenue Performance Management (RPM) Value Index , Gartner Peer Insights , 2024 Gartner SPM Market Guide , and G2.

Our solutions are trusted by a diverse range of global industry leaders like T-Mobile, ServiceNow, Wawanesa Bank, Shaw Industries, Moody's, Stryker and hundreds more. Here’s why you’ll thrive at Varicent: Innovate with Purpose: Build impactful solutions for customers worldwide. Join Excellence: Work in a diverse, collaborative, and innovative team.

Shape the Future: Lead in redefining revenue optimization. Grow Together: Unlock your potential in a supportive environment. Join us at Varicent—where your talent and ambition meet limitless opportunities for success!

About The Role

We're looking for a hands-on and strategic Director, Application Security Architecture Threat Modeling to help shape secure-by-design principles across our SaaS platforms, cloud environments, and AI-enabled products. In this role, you'll partner closely with Engineering, Product, Cloud Operations, Architecture, AI, and Security teams to embed security early in the development lifecycle. You'll lead application security architecture, threat modeling, secure design reviews, and AI security initiatives while helping teams build scalable, resilient, and secure solutions.

This is a highly visible leadership role reporting directly to the VP Chief Information Security Officer.

What You'Ll Do

Lead Security Architecture Secure-by-Design Define and execute the Security Architecture and Security-by-Design strategy and roadmap. Establish secure reference architectures, design standards, and security patterns for cloud-native and AI-enabled solutions. Partner with Engineering and Product teams to embed security into development workflows and system design decisions.

Requirements

in epics, user stories and the AI SLDC.

, technical specifications, design risks, remediation actions, and residual risk documentation. Analyze recurring vulnerabilities, penetration test results, incident learnings, and security assessment findings to identify systemic design flaws and improve secure architecture standards. Lead threat modeling activities across critical applications, platforms, and AI-enabled systems.

Identify architectural risks, attack paths, abuse cases, and trust boundary concerns.

and remediation guidance. Build reusable threat models, security patterns, and design libraries that scale across engineering teams. Partner with Engineering Teams Guide teams on secure design principles, risk-based decision making, and security tradeoffs.

Review distributed systems, microservices, cloud-native architectures, APIs, mobile applications, and identity solutions. Support remediation efforts and validate architectural fixes for security findings. Secure Cloud AI Platforms Conduct architecture reviews across AWS, Azure, and IBM Cloud environments.

Assess containerized, Kubernetes, serverless, and AI-enabled architectures. Define cloud security guardrails, governance models, and secure deployment patterns. Partner with AI teams to evaluate security risks within LLM-enabled products and agentic workflows.

Director, Security Architecture & Threat Modeling