Director, Product Security Architect

About the Role

We're looking for a highly technical and hands-on Director, Product Security Architect to help shape secure-by-design principles across our SaaS products, cloud platforms, and AI-enabled products. This role is deeply embedded in Product and Engineering, with a focus on identifying and eliminating architectural risk before it reaches production.

In this role, you'll partner closely with Engineering, Product, Cloud Operations, Architecture, AI, and Security teams to embed security early in the software development lifecycle. You'll lead product and application security architecture, threat modeling, secure design reviews, and AI security initiatives while helping teams build scalable, resilient, and secure solutions.

This is a highly technical product security role requiring deep hands-on experience with software architecture, threat modeling, and secure design, as well as the ability to translate security risks into practical engineering solutions.

This is a highly visible leadership role reporting directly to the VP & Chief Information Security Officer.

What You'll Do

Lead Product Security Architecture & Secure-by-Design

• Define and execute the Product Security Architecture and Secure-by-Design strategy and roadmap.
• Establish secure reference architectures, design standards, and secure patterns for cloud-native and AI-enabled solutions.
• Partner with Engineering and Product teams to embed security into development workflows and system design decisions.
• Drive adoption of secure-by-design best practices by embedding security requirements in epics, user stories, and the AI SDLC.

Drive Threat Modeling & Risk Analysis

• Produce actionable threat modeling artifacts including data flow diagrams, trust boundary analysis, abuse cases, attack paths, security requirements, technical specifications, design risks, remediation actions, and residual risk documentation.
• Analyze recurring vulnerabilities, penetration test results, incident learnings, and security assessment findings to identify systemic design flaws and improve secure architecture standards.
• Lead threat modeling activities across critical applications, platforms, and AI-enabled systems.
• Identify architectural risks, attack paths, abuse cases, and trust boundary concerns.
• Translate threats into actionable security requirements, architectural recommendations, and remediation guidance, partnering directly with engineering teams to implement and validate design changes.
• Build reusable threat models, security patterns, and design libraries that scale across engineering teams.

Partner with Engineering Teams

• Guide teams on secure design principles, risk-based decision making, and security tradeoffs.
• Review distributed systems, microservices, cloud-native architectures, APIs, mobile applications, and identity solutions.
• Support remediation efforts and validate architectural fixes for security findings and design flaws.

Secure Cloud & AI Platforms

• Conduct architecture reviews across AWS, Azure, and IBM Cloud environments.
• Assess containerized, Kubernetes, serverless, and AI-enabled architectures.
• Define cloud security and AI guardrails, governance models, and secure deployment patterns.
• Partner with AI teams to evaluate security risks within LLM-enabled products and agentic workflows.