VP, Product Security Architecture

What you'll do

• Define and maintain the enterprise Application Security Blueprint, including reference architectures, reusable patterns, and engineering guardrails.
• Set the strategic vision and multi-year roadmap for product security across the application and SaaS ecosystem.
• Lead architecture governance by establishing review criteria, performing design reviews, and managing risk exceptions.
• Drive threat modeling at scale by defining methodologies and documenting trust boundaries, data flows, and security requirements.
• Standardize API security architectures for authentication, authorization, input validation, and rate limiting.
• Establish security patterns for distributed systems, including workload identity, mTLS, secrets management, and policy enforcement.
• Translate regulatory requirements like PCI-DSS and GDPR into actionable technical security designs for application owners.
• Lead and mentor a team of Security Architects to foster a high-performing, security-first culture.

What we're looking for

• Experience in security architecture/engineering with a focus on application and product security in modern software environments.
• Demonstrated ability to operate at an enterprise influence level by setting standards and driving cross-team adoption.
• Strong hands-on knowledge of authentication, authorization, cryptography, secrets management, and secure data handling.
• Proven experience leading threat modeling and producing architecture artifacts like DFDs and risk assessments.
• Strong knowledge of API security and common web/service risks like the OWASP Top 10.
• Experience securing SaaS applications, including SSO/federation, tenant isolation, and shared responsibility models.
• Experience implementing service-to-service security patterns such as workload identity, mTLS, and policy-as-code at scale.
• CISSP, CCSP, CSSLP certifications (preferred).