Product Security Architect

Role Overview

BeyondTrust is hiring a Product Security Architect to advance AI-driven product security. You will lead security architecture activities across the product suite, partnering with engineering, architecture, and product management to eliminate architectural risks before release.

Key Missions & Responsibilities

• Lead threat modeling and attack surface analysis across products, platform services, endpoint agents, and cloud-native systems.
• Run secure design reviews and perform architecture risk analysis at scale.
• Use LLM platforms (e.g., Claude, OpenAI) to scale threat analysis, abuse-case generation, architecture review, and remediation guidance.
• Embed secure-by-default patterns into product development by participating in design reviews and proposing concrete alternatives.
• Mentor Product Security Engineers and help evolve the organization’s AI-first Product Security Architecture strategy.
• Partner directly with engineering teams to ensure security guidance translates into actionable implementation.

Requirements

• Strong understanding of cloud-native systems, APIs, endpoint agents, thick clients, and identity/security platforms.
• Hands-on experience using LLM platforms (Claude, OpenAI, or similar) in engineering or security workflows; be able to explain where they work and where they don’t.
• Builder mindset: ability to create scalable security workflows/frameworks/enablement.
• Ability to influence engineering and product teams with practical, credible guidance (not a mindset focused on blocking releases).
• Background securing endpoint technologies, identity systems, or enterprise security platforms.
• Cloud security experience with AWS, Azure, and/or Kubernetes environments.
• Deep, practical experience with threat modeling, attack surface analysis, secure design reviews, and architecture risk analysis.
• Ability to build AI-native security workflows (e.g., plugins, agents, or developer tooling).
• Offensive security / adversarial testing background (understanding attacker thinking).
• 7+ years in Product Security, Application Security, Security Architecture, or Software Security Engineering.

Nice-to-Haves / Expectations

• Experience operating at a high level from day one and pushing security practices further within an AI-first architecture strategy.
• Experience securing API and endpoint-heavy products and services.