> Markdown version of [/jobs/ext/1781966-sr-software-security-architect](https://www.wearedevelopers.com/jobs/ext/1781966-sr-software-security-architect). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Sr Software Security Architect - **Company:** Lenovo - **Location:** Morrisville, NC, United States (Remote available) - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Java (Programming Language), Microsoft Windows, Android Software Development, Software Applications, Burp Suite, C Sharp (Programming Language), Mobile Application Development, Cloud Computing, Static Program Analysis, Code Review, Cyber Security, Computer Engineering, Software Debugging, Mobile Application Software, Open Web Application Security, Reverse Engineering, SAP Sales and Distribution, Secure Coding, Smart Devices, Software Engineering, Software Vulnerability Management, Software Security, Virtual Reality, Information Technology - **Published:** July 2, 2026 - **Apply:** https://diversityjobs.com/main/sendform/8/8/28176/1/9208769?backUrl=%2Fcareer%2F9208769%2FSr-Software-Security-Architect-North-Carolina-Raleigh ## About the Role Bachelor's degree in Computer Science, Computer Engineering, or related field; or relevant cybersecurity experience of 5+ years. 2+ years experience in Computer Security with experience in secure product design, vulnerability management, ethical hacking, and product security testing 2+ years experience in developing apps for Windows and Android operating systems, using common application programming languages such as C# or Java Familiarity with general security testing and reverse engineering tools, such as Burp Suite, Kali, ZAP, etc Preferred Qualifications: Understanding of general secure development practices: code review, static analysis, OWASP, etc. General knowledge of cryptography concepts such as hash functions and symmetric/asymmetric encryption Knowledge of and experience with applying Common Weakness Enumeration (CWE), Common Vulnerability Scoring System (CVSS), Common Vulnerabilities and Exposures (CVE) and Open Web Application Security Project (OWASP) processes and remediation recommendations. An understanding and ability to communicate the techniques, tactics and practices of an attacker Experience with the application of threat modeling or other risk identification techniques Experience in reverse engineering, disassemblers, debuggers, and developing exploits is a plus. Detailed knowledge of security vulnerabilities and remediation techniques Multiple Industry security certifications such as CISSP, CCSP, SANS-GEVA (or other SANS certs), OCSP Communications skills in Mandarin ## Description This position is for a Senior Software Security Architect in the Security Center of Excellence for PC and Smart Devices business (PCSD). This is an exciting role where you will be working with a global team of development engineers and security professionals - assessing and securing Lenovo applications and devices. You will work with multiple development teams across Lenovo to ensure that secure development practices are followed, as well as working with security champions to review applications that are preinstalled on Lenovo devices. You will be working alongside some of the best security teams in the industry. The security threat landscape presents a wide range of risks to the solutions offered by Lenovo's PC & SD organization - from the Cloud, to PCs, IoT devices, mobile applications and Augmented and Virtual Reality devices. As a Software Security Architect, you will join Lenovo's Global Security Lab, based in Morrisville, NC, as a member of our product security team. This team is responsible for ensuring Lenovo's PC & SD diverse product and technology portfolio is designed, developed and delivered securely for our customers. What You'll Do Help lead a global team of development security champions to assess the security posture of Lenovo developed applications for Windows and Android devices. * Conduct security assessments of client applications, both Lenovo developed and 3rd party, using industry-standard tools and techniques to identify vulnerabilities. * Risk-ranking of identified threats to prioritize mitigation and remediation activities. * Help train members of development teams in secure development best practices * Perform security code reviews of application source code * Participate in software design sessions with development teams, analyzing and assisting in the secure design and architecture of PC application software * Working with software designers, developers, project managers, and testers - developing close working partnerships with development teams - to review, assist and recommend changes and solutions to address the security of Lenovo- and third party-developed software * Act as a trusted advisor and subject matter expert to product development and engineering teams - provide advice on secure application design, development and validation * Identify and evaluate needed tools and refine processes and procedures to ensure security reviews are performed correctly. * Define security requirements for Lenovo and third-party development teams. * Stay current in the latest security tools, methodologies, and best practices, especially as it relates to Windows and mobile app development. * Act as a Secure Development Lifecycle evangelist, guiding and training development teams within the Personal Computer & Smart Devices group on how to effectively and efficiently apply secure development practices ## Related Videos - [How to Cause (or Prevent) a Massive Data Breach- Secure Coding and IDOR](https://www.wearedevelopers.com/videos/39-how-to-cause-or-prevent-a-massive-data-breach-secure-coding-and-idor) - [Agent Smith Gets Hardware: Autonomous IoT Hacking From Debug Port to Cloud API](https://www.wearedevelopers.com/videos/100258-agent-smith-gets-hardware-autonomous-iot-hacking-from-debug-port-to-cloud-api) - [Are Code Reviews Worth It? Insights from 16 Years of Review Data](https://www.wearedevelopers.com/videos/1135-are-code-reviews-worth-it-insights-from-16-years-of-review-data) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [WeAreDevelopers LIVE – AI vs the Web & AI in Browsers](https://www.wearedevelopers.com/videos/1743-wearedevelopers-live-ai-vs-the-web-ai-in-browsers) - [Build a CI/CD pipeline to automate code reviews and ensure code quality](https://www.wearedevelopers.com/videos/349-build-a-ci-cd-pipeline-to-automate-code-reviews-and-ensure-code-quality) ## Related Articles - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [7 Important Tips That Every Software Developer Should Know](https://www.wearedevelopers.com/magazine/101-7-important-tips-that-every-software-developer-should-know) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks) - [What’s the Difference between a Junior, Mid, and Senior Developer?](https://www.wearedevelopers.com/magazine/238-what-s-the-difference-between-a-junior-mid-and-senior-developer) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)