Product Security Architect

About This RoleAI processing…

Key Responsibilities

• 1
  Security Mentorship: Serve as the primary security mentor and subject matter expert for engineering teams, fostering a culture of technical excellence and rigorous security design.
• 2
  Product Vision: Define the product security vision, ensuring consistency across complex application architecture projects.
• 3
  Project Execution: Lead the security implementation of new product features from initial design to final production deployment.
• 4
  Threat Modeling: Conduct proactive threat modeling for new product features and major architectural changes.
• 5
  Application Security Design: Define and enforce best practices around application security, including audit/application logging, configuration, tenant separation, encryption, customer BYOK, RBAC design, API design, and Session/cookie/token management.
• 6
  Identity & Access: Define and implement secure Authentication/Authorization protocols (mTLS/OIDC/OAuth/SAML) for multi-tenant SaaS products.
• 7
  Third-Party Risk: Assess and mitigate risks associated with application third-party integrations such as payment, AI models, code repositories, etc.
• 8
  Code Review: Apply a strong programming background (Python/Go/JavaScript) to perform hands-on code reviews when needed to validate security controls.

Requirements

• 8+ years of experience in product security engineering or architecture, specifically with Multi-tenant SaaS products.
• Experience with AI Agent-based Saas products is a plus.
• Deep expertise in common product security practices (e.g., tenant separation, RBAC, BYOK, secure API design, session/token management).
• Expertise in Authentication/Authorization protocols (mTLS/OIDC/OAuth/SAML) in a multi-tenant SaaS environment.
• Strong programming background (Python/Go/JavaScript) with proven ability to conduct code review.
• Experience writing and maintaining Architecture documents.
• Exceptional ability to communicate technical risk to both engineering and executive audiences.
• Strong track record of contributing to Cybersecurity Risk Register .

Perks & BenefitsTypical for this role