Product Security Architect

Job Description

We are seeking an experienced Product Security Architect with the primary focus on leading our threat modeling initiative. As a Product Security Architect, you will be responsible for helping design, implementing, and maintaining the security posture of our product environments in partnership with the product teams. You will be leading discussions with product teams regarding security design considerations and implementations. Your primary focus will be on ensuring the confidentiality, integrity, and availability of our products and services by instituting a threat modeling program that empowers product teams in conducting outcome-driven threat models that improve product security. You will also be responsible for advising product teams on secure architecture implementation details while facilitating threat models.

Responsibilities

• Design, develop, and maintain a product security threat model program aligned with industry best practices and meet business requirements.
• Collaborate with product teams to guide threat modeling sessions and track discovered security concerns and mitigation plans  
• Lead product security architecture champions community strategy that product architects to the corporate security architecture strategies and programs
• Collaborate with product teams to provide one on one support on secure architecture design and implementations
• Document standards and patterns to enable secure secrets management practices for product environments  
• Collaborate with adjacent product security teams to provide support on secure architectural “how-to” details required by Governance, Risk, Compliance (GRC) functions, Product Security Reviews (PSRs), Champions program
• Stay up-to-date with the latest security trends, threats, and technologies, and provide recommendations for enhancing security-by-design posture across products

In return for your expertise, we’ll support you in this new challenge with coaching & development every step of the way. 

Also, to reward your hard work you’ll get:

• Competitive salary package
• Private medical & dental coverage
• Employee Pension Plan
• Life insurance
• Employee Stock Purchase Plan
• Flexible working hours
• Strong collaborative culture
• Comfortable work conditions (high-class offices, parking space)
• Volleyball field and grill place next to the office
• Access to wellness facilities and integration events as well as training and broad
• Development opportunities

Basic Requirements

• Overall 5+ years of experience in security engineering and architecture design, with at least 3+ years of experience in product security architecture. Extensive experience in designing and implementing secure network, system, and application architectures.
• Bachelor's degree in Computer Science, Information Security, or a related field (Master's degree preferred).
• Experience in security engineering at scale in complex product environments. Proven experience as a security architect or similar role in a large corporate environment.
• Strong communication and interpersonal skills, with the ability to collaborate effectively with cross-functional teams and stakeholders.
• Ability to explain complex security issues and risks to non-technical stakeholders
• Ability to handle multiple projects and prioritize tasks in a fast-paced environment.
• Leadership skills to guide and mentor product teams on security best practices
• Relevant certifications such as CISSP, CISM, CCSP, or AWS/Azure/GCP security certifications are highly desirable
• Strong understanding of network security, encryption, identity and access management, and data protection principles.
• In-depth understanding of security monitoring technologies, SIEM, IDS/IPS, log management, threat intelligence, vulnerability management, secure coding practices, threat modeling
• Familiarity with industry standards and frameworks such as FedRAMP, NIST, ISO 27001, CIS, PCI DSS, ATT&CK, D3FEND, CIS, CSF, NICE, CAF.
• Proficient in scripting or programming languages (e.g., Python, PowerShell) to automate security tasks.
• Excellent problem-solving and analytical skills, with the ability to analyze complex security incidents and recommend appropriate actions.