Product Security Principal
Core
Embedded security subject matter expert and thought lead responsible for cultivating a security-first culture, managing risks, and ensuring products are secure from design through deployment.
Role type
Principal Product Security Architect
Builds
Secure product lines and technology supply chain
Domain
Financial services / Banking / Application Security
Required skills
threat modeling, security architecture design, secure code practices, vulnerability assessment, penetration testing coordination, regulatory compliance translation, third-party risk management, Key Risk Indicator monitoring, security incident response, control design for engineers
Preferred skills
Public Cloud computing (Azure/AWS), APIs/microservices, IAM, Secrets Management, DevSecOps, SSDLC, financial services experience, CISSP/CISM certifications
Technologies
Azure, AWS, CI/CD pipelines, container security, code scanning tools
Responsibilities
Cultivate security culture by embedding threat modeling and secure code practices; Own application-specific security requirements and architecture design; Lead security testing and validation activities; Prepare Technology Review Board security artifacts; Monitor Key Risk Indicators and manage emerging security issues; Partner with third-party oversight teams for vendor risk management; Translate regulatory requirements into control designs for engineering teams.
Seniority
Principal, strategy & mentorship
