Senior Product Security Architect - Remote

Company Description

About CyberArk:
CyberArk (NASDAQ: CYBR), is the global leader in Identity Security. Centered on privileged access management, CyberArk provides the most comprehensive security offering for any identity – human or machine – across business applications, distributed workforces, hybrid cloud workloads and throughout the DevOps lifecycle. The world’s leading organizations trust CyberArk to help secure their most critical assets. To learn more about CyberArk, visit our CyberArk blogs or follow us on X, LinkedIn or Facebook.

Job Description

Join our Engineering Security Architecture team as a Senior Product Security Architect and help define the future of secure product development. In this role, you’ll partner with Development and SRE teams to embed security into every stage of the SSDLC—ensuring our platforms are resilient, cloud-ready, and built with security by design. If you’re passionate about influencing architecture, mentoring teams, and driving measurable security improvements at scale, this is your opportunity.

Responsibilities 

• Embed security throughout the SSDLC by partnering with Development and SRE teams—covering threat modeling, secure design reviews, coding practices, and CI/CD pipeline security.
• Lead cross-engineering security initiatives, improving SSDLC processes, tooling, and automation.
• Act as a trusted advisor to engineering leadership and product teams, influencing architecture and long-term technology strategy.
• Design and guide security for AI/ML systems, ensuring safe model integration, data protection, and compliance with emerging AI security standards.
• Define and evolve cloud security architectures and enterprise-wide security best practices.
• Establish secure development standards and provide hands-on support for critical systems.
• Oversee threat modeling, design, and code reviews to ensure security is built-in.
• Deliver training, mentorship, and awareness programs to strengthen security capability across teams.
• Support incident response and drive post-incident improvements.
• Continuously research emerging technologies and threats to enhance resilience.
• Review and update security policies, architecture principles, and standards to align with evolving risks and business goals.

#LI-HA1

Qualifications

• 6+ years in software development and 5+ years in security, including 3+ years in security architecture or technical leadership.
• Strong engineering background with hands-on experience in secure design, threat modeling, and risk analysis.
• Proven ability to embed and scale security across Dev and SRE teams.
• Deep knowledge of SSDLC, secure coding, and cloud security (AWS preferred).
• Experience designing and assessing AI/ML security, including data protection and model integrity.
• Expertise in threat modeling, risk management, and architecture reviews (STRIDE, PASTA, or equivalent).
• Familiarity with OWASP, NIST, CSA frameworks.
• Strong judgment to balance security, speed, and innovation.
• Excellent communication and leadership skills; fluent in English.
• Practical experience with security tools, infrastructure, and cloud-native technologies.

Preferred:

• Experience with FedRAMP-compliant systems.
• Contributions to the security community (conferences, blogs, open source).
• Knowledge of security testing and research.
• Experience driving security maturity programs in Agile or DevSecOps environments.
• Proven track record of mentoring engineers in secure design and development.

Additional Information

CyberArk is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, creed, sex, sexual orientation, gender identity, national origin, disability, or protected