Director of Product Security Architecture (Remote)

Job summary

This role involves leading the Security Architecture function within a Security Platforms & Architecture sub-department, serving as a strategic partner to product and engineering leadership. The position focuses on managing a team dedicated to product security across various major areas, including Security, AI, and Core DevOps.

Qualifications

• Over 10 years of experience in software, architecture, or application security within high-velocity R&D environments.
• Strong application security knowledge and secure design principles, with familiarity in vulnerability classes and mitigation strategies.
• Expertise in systemic product security risks, particularly in CI/CD security, software supply chain security, and multi-tenant SaaS architecture.

Responsibilities

• Lead and mentor a team of Product Security Architects and specialists.
• Own and evolve the Product Security Architecture strategy, transitioning architects to become accelerators of secure delivery.
• Oversee the Product Security Risk Register, articulating and prioritizing systemic risks with corresponding risk reduction plans.
• Define security visions, standards, and configurations that enable product teams to make informed security decisions.
• Drive the Product Security AI strategy to enhance security review coverage and support developer velocity.
• Collaborate with various security teams to integrate risk reduction measures and quality standards into architectures.
• Track architecture-related metrics and represent Product Security in cross-functional discussions.

Skills

• Strong leadership and mentoring capabilities.
• Excellent communication skills for articulating risks and tradeoffs.
• Ability to operate in a fast-paced, evolving environment while maintaining a strong security posture.

Education

• Relevant degree in Computer Science, Information Security, or a related field is preferred but not explicitly stated.

Tools

• Familiarity with security tools and platforms relevant to application and infrastructure security.