Product Security Architect, Threat Modeling

About the role

Product Security team focuses on embedding security principles throughout the software lifecycle. The Product Security Architect leads threat modeling and security architecture reviews, guiding engineering and product teams to design resilient, cloud‑native applications. Remote work from India, collaborating with DevOps, cloud, and infrastructure teams to improve security maturity and reduce application risks.

What you’ll do

• Conduct security architecture reviews and threat modeling for applications and platforms
• Partner with engineering to identify risks and recommend mitigations throughout the SDLC
• Develop and maintain security standards, reference architectures, and best practices
• Build security automation tooling to improve review efficiency
• Perform application security assessments and support incident investigations
• Create developer enablement materials and conduct security awareness sessions
• Assess security considerations for AI and machine learning solutions
• Collaborate across Product Security, Engineering, DevOps, Cloud, and Infrastructure teams

What you’ll bring

• 5-8 years application security
• Experience with threat modeling methodologies (STRIDE, PASTA, MITRE ATT&CK)
• Strong knowledge of OWASP Top 10, API security, cryptography
• Hands‑on with AWS cloud environments
• Familiarity with SAST/DAST/SCA tools
• Experience building security automation scripts
• Understanding of DevSecOps and CI/CD security integration
• Ability to communicate security risks to technical and non‑technical stakeholders

Skills

Benefits

• Remote work opportunity
• Professional growth in cloud‑native and AI security
• Collaboration with cross‑functional engineering teams
• Exposure to advanced application security practices
• Continuous learning and innovation environment