About Lovesac
We are a young-at-heart, fast-growing furniture company, dedicated to helping people fill their homes with Total Comfort™. We do this by designing and innovating furniture solutions that are adaptable, washable, expandable, and delivered right-to-your-door-able, allowing our customers to live the life they want to live.
Our Designed for Life mission started with Sacs, a seat so much better than your classic beanbag made with repurposed Durafoam and designed to reduce environmental impact while providing unimaginable, cloud-like comfort. From there, we expanded the possibility for sustainable furniture with Sactionals, a customizable modular sectional that can be endlessly rearranged to evolve with you. Our product line has grown a lot since our Sacs days, but our goal will always remain the same – to create truly adaptable, comfortable furniture that can be with you for life.
About our Culture
At Lovesac, we strive to be an employer of choice by embodying a culture that encourages team members to think and dream big. We call this Top Ambition. We aim to not only excel within our industry but also make a meaningful impact on the world. Above all else, we’re driven by love (because it matters) and are dedicated to promoting love and happiness in all aspects of our work. It’s about success, of course, but it’s also about making a positive impact on everyone our business touches.
About the Role
The Information Security Architect and Sr. Engineer is a technical role responsible for designing, engineering, and evolving Lovesac’s information security architecture, platforms, and services while partnering closely with Enterprise Architecture, IT Operations, and technology teams across the organization. This role helps define the long-term security architecture vision, translates business and technology strategy into scalable security patterns and standards, and ensures information security capabilities are engineered and operated effectively as the business grows. This role balances strategic architecture leadership with hands-on engineering and platform execution. This role is also responsible for both the cyber department’s footprint, including security platforms, tooling, integrations, automation, and control patterns—and for advising and supporting secure design across enterprise solutions. Working alongside Enterprise Architects, IT, and application teams, this role embeds security into application, cloud, data, infrastructure, and platform designs early in the lifecycle while also ensuring those designs are implemented, maintained, and optimized in practice. The position plays a critical role in shaping Lovesac’s security posture by standardizing controls, reducing architectural and operational risk, and enabling consistent, defensible security decisions across the enterprise. This role ensures information security platforms are reliable, well-integrated, and aligned with approved designs, while helping Lovesac scale securely through a combination of strong architecture, disciplined engineering, and continuous improvement.
What You’ll Do
Security Architecture Strategy, Design, and Engineering
- Define and evolve the enterprise security architecture vision and roadmap.
- Establish security architecture principles aligned with Zero Trust and industry frameworks.
- Create and maintain security reference architectures, design patterns, and implementation standards.
- Design and engineer security capabilities that support business growth, cloud adoption, and omnichannel operations.
- Evaluate emerging technologies and recommend secure, operationally viable architectural approaches.
- Provide architectural and engineering input into security platform selection, capability development, and modernization efforts.
Security Platform Engineering and Operations
- Engineer, configure, maintain, and optimize information security-owned platforms, including SIEM, SOAR, EDR, vulnerability management, EntraID, Data Loss Prevention, network security, AI security, and related security tools.
- Perform routine platform administration, upgrades, health monitoring, and maintenance activities.
- Ensure security platforms are properly configured, tuned, and operating in alignment with approved architectures and standards.
- Troubleshoot platform issues and partner with vendors and internal teams to resolve incidents and service gaps.
- Maintain configuration standards, technical documentation, and operational runbooks.
- Support capacity planning, performance optimization, and long-term platform modernization initiatives.
Enterprise Solution Architecture and Integration Support
- Participate in enterprise architecture and solution design reviews for both cyber and non-cyber platforms.
- Advise on secure design for applications, cloud services, data platforms, network-connected systems, and enterprise integrations.
- Implement and maintain integrations between security platforms and enterprise systems.
- Document data flows, trust boundaries, integration patterns, and security control placements.
- Work with solution and application architects to balance security, usability, scalability, and operational effectiveness.
- Ensure security requirements are clearly articulated, technically feasible, and consistently applied across projects.
Automation, Detection, and Operational Enablement
- Support automation and orchestration efforts to improve detection, response, and operational efficiency.
- Assist with data ingestion, normalization, enrichment, and platform connectivity across security tooling.
- Provide engineering support for Information Security department, including onboarding new detection use cases and response workflows.
- Support incident response by ensuring platform data, integrations, and tooling are available and reliable.
- Partner with threat intelligence, identity, ITSM, and incident response teams to operationalize new requirements.
- Contribute to reducing manual effort through scripting, workflow integration, and response automation.
Architecture Governance, Continuous Improvement, and Collaboration
- Develop and maintain security architecture standards, guidelines, and approved implementation patterns.
- Support governance processes, including design reviews, exception handling, and technical evidence for audits and assessments.
- Ensure architecture and engineering decisions align with internal policies and external regulatory requirements.
- Identify architectural gaps, operational inefficiencies, technical debt, and improvement opportunities.
- Partner closely with Enterprise Architects, Information Security team members, and other IT teams to align roadmaps and delivery priorities.
- Continuously refine standards, platforms, and engineering practices based on threat evolution, business change, and operational lessons learned.