Product Security Architect (Threat Modeling)

Accountabilities: The role is responsible for leading security architecture initiatives, identifying risks, and enabling secure software development practices across product teams. Key responsibilities include:

Conduct security architecture reviews and threat modeling exercises for applications, products, services, and platform capabilities.

Partner with engineering and product teams to identify security risks and recommend practical mitigation strategies throughout the SDLC.

Act as a security advisor by providing guidance on secure architecture patterns, coding practices, and implementation approaches.

Review application architectures, APIs, data flows, infrastructure designs, and deployment models to identify vulnerabilities and improve security posture.

Assess security considerations for AI and machine learning solutions and recommend secure development approaches.

Develop and maintain security standards, reference architectures, technical guidelines, and best practices.

Build and enhance security automation, tooling, and workflows to improve architecture reviews and threat modeling efficiency.

Perform application security assessments and support investigations into security concerns discovered during development.

Create developer enablement materials, conduct security awareness sessions, and promote secure-by-design practices.

Support security incident investigations and perform root cause analysis for application security issues.

Collaborate with Product Security, Engineering, DevOps, Cloud, and Infrastructure teams to integrate security into development processes.

Requirements:

The ideal candidate has strong experience in application security, security architecture, and risk assessment, with the ability to influence engineering teams and communicate complex security concepts. Required qualifications and skills include:

5–8 years of experience in Application Security, Product Security, Security Architecture, or a related cybersecurity field.

Strong understanding of Secure Software Development Lifecycle (SSDLC/SDLC) principles.

Hands-on experience conducting threat modeling, security architecture reviews, application security assessments, and risk assessments.

Strong knowledge of security principles including OWASP Top 10, API security, authentication, authorization, cryptography, secrets management, and secure design practices.

Experience reviewing application architectures, cloud environments, APIs, integrations, and technical designs.

Ability to identify, prioritize, and communicate security risks with practical remediation recommendations.

Experience reviewing source code and understanding modern programming languages.

Experience developing security scripts, automation tools, or workflows to improve security engineering processes.

Familiarity with cloud platforms, especially AWS, and cloud-native application architectures.

Knowledge of threat modeling methodologies such as STRIDE, PASTA, Attack Trees, and MITRE ATT&CK is preferred.

Familiarity with security testing tools including SAST, DAST, SCA, IaC scanning, and vulnerability management platforms.

Understanding of DevSecOps practices and CI/CD security integration.

Strong technical documentation, communication, and stakeholder management skills.

Ability to collaborate effectively with technical and non-technical teams while influencing secure design decisions.

Benefits:

The role offers the opportunity to work in a collaborative security-focused environment with flexibility and professional growth opportunities, including:

Remote work opportunity based in India.

Opportunity to work on impactful product security initiatives and modern technology environments.

Exposure to cloud-native architectures, AI security, and advanced application security practices.

Collaboration with cross-functional engineering and product teams.

Opportunities to strengthen expertise in threat modeling, security architecture, and DevSecOps.

A role focused on continuous learning, innovation, and improving digital security practices.

How Jobgether works: We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team. We appreciate your interest and wish you the best!  Why Apply Through Jobgether? 

Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.

#LI-CL1