Director, Product Security Architect

Accountabilities:

• • Define and execute the Product Security Architecture and Secure-by-Design strategy, roadmap, standards, and reference architectures for cloud-native and AI-enabled products.
  • Partner with Product and Engineering teams to integrate security requirements into development workflows, epics, user stories, and AI software development lifecycle processes.
  • Lead threat modeling and security architecture reviews, producing data flow diagrams, trust boundary analysis, abuse cases, attack paths, security requirements, remediation plans, and residual risk documentation.
  • Assess recurring vulnerabilities, penetration testing results, security incidents, and assessment findings to identify systemic architectural weaknesses and improve security standards.
  • Review distributed systems, microservices, APIs, mobile applications, identity solutions, cloud-native platforms, containers, Kubernetes, serverless environments, and AI-enabled architectures.
  • Translate security risks into practical architectural recommendations and work directly with engineering teams to implement and validate remediation.
  • Establish reusable threat models, secure design patterns, security requirements, and architecture libraries that can be adopted across engineering teams.
  • Conduct security architecture reviews across AWS, Azure, and IBM Cloud environments and define appropriate cloud security guardrails and secure deployment patterns.
  • Partner with AI teams to assess security risks associated with LLM-enabled products, AI development environments, and agentic workflows.
  • Develop security standards, training materials, architecture guidance, and governance practices while communicating risks and recommendations effectively to both technical and executive audiences.
  • Identify opportunities to automate security architecture and design validation and continuously improve secure development processes.
  • Build strong relationships across Product, Engineering, Architecture, Cloud, Security, and Legal teams while influencing risk-based decision-making and security trade-offs.

  Requirements:

  • 10+ years of information security experience, including substantial hands-on experience in Product Security, Application Security, Security Architecture, or Software Security Engineering.
  • 3+ years of hands-on experience in Application Security Architecture and Threat Modeling.
  • 3–5 years of software development or software engineering experience.
  • Strong knowledge of secure application design, cloud security, modern software architectures, DevSecOps, and secure SDLC practices.
  • Demonstrated experience securing web, API, mobile, cloud-native, and AI-enabled applications.
  • Expertise with threat modeling methodologies such as STRIDE, CAPEC, and MITRE ATT&CK.
  • Practical knowledge of AWS, Azure, or IBM Cloud security architectures.
  • Experience with AI-enabled development environments, LLM security, or agentic architectures is highly relevant.
  • Strong analytical and problem-solving abilities, with the capacity to identify architectural risks and translate them into actionable engineering solutions.
  • Excellent communication and stakeholder management skills, with the ability to influence senior technical and business leaders.
  • Ability to operate effectively in a highly collaborative, cross-functional environment and balance technical depth with pragmatic risk management.
  • Relevant certifications such as ISC2 ISSAP, CISSP, CSSLP, OSCP, or cloud security certifications are considered an asset.

  Benefits:

  • Estimated annual base salary of $138,200–$181,400 CAD, with actual compensation determined by qualifications, experience, market data, and other job-related factors.
  • Potential additional compensation through bonuses and other applicable incentive programs.
  • Comprehensive medical, dental, and vision coverage tailored to local needs.
  • Paid time off and public holidays.
  • Dedicated volunteer days to support causes and communities that matter to you.
  • Ignite Days dedicated to learning, professional development, and continuous skill growth.
  • Retirement plans designed to support long-term financial security.
  • Tuition assistance for continuing education and professional development.
  • Remote and hybrid work options available across most regions, providing flexibility to work where you thrive.
  • A collaborative and inclusive environment focused on innovation, learning, and meaningful professional growth.
  • Opportunities to influence security strategy across SaaS, cloud, and emerging AI technologies.
  • This posting represents a new vacancy.