senior security architect (Nashville, TN)

Now Brewing – Senior Security Architect! #tobeapartner From the beginning, Starbucks set out to be a different kind of company. One that not only celebrated coffee and the rich tradition, but that also brought a feeling of connection. We are known for developing extraordinary leaders who share this passion and are guided by their service to others. This position contributes to Starbucks’ success by defining and guiding security architecture for enterprise technology solutions, with a priority on enabling AI for Starbucks. The role translates business objectives, cybersecurity requirements, and responsible AI expectations into practical designs, reusable security patterns, and documented risk recommendations that help teams deliver securely and at pace. As a Senior Cybersecurity Architect, you will partner with business and technology teams from discovery through implementation to assess designs, explain security trade-offs, and verify that agreed protections are incorporated. This role contributes to Starbucks success by safeguarding information and systems assets against unauthorized use, disclosure, modification, damage, or loss. Security Architecture uses risk frameworks and methodologies to assess technology risk, evaluate technology providers, review trends, threats, and solutions. We use these assessments to inform decision making, establish, and interpret cybersecurity policies and standards, and provide implementation guidance to manage risk. This position reports within the Global Cybersecurity Services (GCS) organization. GCS is chartered with leading, inspiring, and supporting Starbucks to cultivate trust in our brand by ensuring confidentiality, integrity, and availability in every partner, customer & supplier experience. As a Senior Security Architect, you will… * Strengthen the cybersecurity program through practical security architecture that helps teams deliver secure technology solutions. * Develop reference architectures and reusable security patterns that address common requirements and recurring security findings. Identify recommended best practices and incorporate them into repeatable designs. * Lead threat modeling to identify risks and translate findings into security requirements and mitigations incorporated into solution designs. * Lead security architecture reviews of platforms and applications across complex multi-tenant, multi-provider, and vendor-cloud environments. Document design risks, security trade-offs, and recommendations to guide implementation. * Advise technology builders during solution design, helping them compare security options, understand trade-offs, and apply practical protections. * Influence secure delivery through partnership \- Work with engineering and delivery teams to enable strategic platform initiatives. Align architecture review priorities and timing with delivery needs and promptly surface critical risks and coordinate their resolution with the appropriate teams. * Deliver consistent, timely, high-quality assessments \- Make assessment scope and status visible, perform reviews consistently, and document findings, recommendations, and design decisions clearly. Maintain technical proficiency and related certifications for core products and solution areas. * Contribute to an energetic, fun, and collaborative team \- Share expertise, support colleagues, and work together to move the business forward while acting in accordance with Starbucks guiding principles and values. We’d love to hear from people with... * 6+ years of experience in information technology, including 6+ years in infrastructure security or information security. * Bachelor’s degree in a relevant field or 5+ years of equivalent experience in cybersecurity engineering–related roles. * Demonstrated knowledge of cybersecurity frameworks (e.g., NIST, ISO, CSA), applicable compliance requirements, and enterprise security strategies; ability to translate these into security policies, procedures, design principles, and implementation practices. * Experience conducting security assessments, documenting risks and recommendations, and conducting or supporting security audits. * Hands-on experience assessing and securing AI/ML systems and generative AI applications, including threat modeling with frameworks such as the OWASP Top 10 for LLM Applications or MITRE ATLAS. * Working knowledge of AI governance and responsible AI practices. You can turn emerging AI risks into practical architecture guidance, reference designs, and control requirements for delivery teams. * Experience using AI-assisted tools to speed up security work, such as threat modeling, design review, or policy analysis, while validating outputs for accuracy and risk. * Experience leading threat modeling to identify trust boundaries, attack paths, and appropriate mitigations for proposed solutions. * Experience deploying, configuring, troubleshooting, and managing enterprise security controls and tools, such as firewalls, antivirus software, and intrusion detection systems. * Demonstrated experience working in public cloud services (AWS, Azure, GCP, etc.) and serverless and containerized environments. * Knowledge of operating systems, network architectures, and network security protocols and concepts, including their application to enterprise security design. * Ability to design and evaluate protections for encryption, authentication and authorization, API security, and secrets management. * 4+ years of experience working with infrastructure as code (IaC) technologies and supporting tools to implement and maintain infrastructure. * Ability to analyze security threats, attack vectors, and vulnerabilities and use the findings to prioritize mitigations and inform architecture decisions. * Experience with at least one modern programming language, such as Java, Go, Python, Ruby, C++, or C#, and proficiency using APIs and common scripting languages to automate tasks. * Ability to use architecture tools and reusable security patterns to evaluate solution designs and integrate security controls into delivery pipelines. * Strong problem-solving and troubleshooting skills, with the ability to use critical and logical thinking to diagnose issues and prioritize work that has the greatest impact on security posture and risk management. * Exceptional written and verbal communication skills, including the ability to explain security risks, design trade-offs, and recommendations clearly to technical and nontechnical stakeholders. * Ability to establish cross-functional, collaborative relationships with business and technology partners. * Demonstrated ability to work in a challenging, dynamic, and fast-paced environment with limited supervision. Candidate should be able to succeed in both independent and collaborative work scenarios. * Preferred, not required: certifications such as CISSP, CISM, CIPM, or other credentials focused on information security, data privacy, or information risk management. As a Starbucks partner, you (and your family) will have access to medical, dental, vision, basic and supplemental life insurance, and other voluntary insurance benefits. Partners have access to short-term and long-term disability, paid parental leave, family expansion reimbursement, paid vacation from date of hire*, sick time (accrued at 1 hour for every 25 hours worked), eight paid holidays, and two personal days per year. Starbucks also offers eligible partners participation in a 401(k) retirement plan with employer match, a discounted company stock program (S.I.P.), Starbucks equity program (Bean Stock), incentivized emergency savings, and financial well-being tools. Additionally, Starbucks offers 100% upfront tuition coverage for a first-time bachelor’s degree through Arizona State University’s online program via the Starbucks College Achievement Plan, student loan management resources, and access to other educational opportunities. You will also have access to backup care and DACA reimbursement. Starbucks will comply with any applicable state and local laws regarding employee leave benefits, including, but not limited to providing time off pursuant to the Colorado Healthy Families and Workplaces Act, and in accordance with its plans and policies. This list is subject to change depending on collective bargaining in locations where partners have a certified bargaining representative. For additional information regarding partner perks and more detailed information about benefits, go to starbucksbenefits.com. *If you are working in CA, CO, IL, LA, ME, MA, NE, ND or RI, you will accrue vacation up to a maximum of 120 hours (190 in CA) for roles below director and 200 hours (316 in CA) for roles at director or above. For roles in other states, you will be granted vacation time starting at 120 hours annually for roles below director and 200 hours annually for roles director and above. The actual base pay offered to the successful candidate will be based on multiple factors, including but not limited to job-related knowledge/skills, experience, geographical location, and internal equity. At Starbucks, it is not typical for an individual to be hired at the high end of the range for their role, and compensation decisions are dependent upon the facts and circumstances of each position and candidate. We believe we do our best work when we're together, which is why we're onsite four days a week. Join us and inspire with every cup. Apply today! Starbucks Coffee Company is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, age, national origin, disability, or protected veteran status, or any other characteristic protected by law. Qualified applicants with criminal histories will be considered for employment in a manner consistent with all federal, state and local ordinances. Starbucks Coffee Company is committed to offering reasonable accommodations to job applicants with disabilities. If you need assistance or an accommodation due to a disability, please contact us at applicantaccommodation@starbucks.com or 1(888) 611-2258.