Product Security Lead
Core
Leads the Product Security function, defining strategy and embedding security throughout the product and engineering lifecycle for SaaS, connected devices, and cloud platforms.
Role type
Senior IC Product Security Lead
Builds
Secure-by-design product architectures, automated security controls, and resilient cloud-native systems
Domain
Cybersecurity, Cloud Security, IoT/OT Security, SaaS
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
Application security, Product security, Secure Software Development Lifecycle (SSDLC), Threat modeling, Secure design reviews, CI/CD security integration, Cloud-native architecture, API security, Vulnerability management, Penetration testing, Security frameworks (ISO 27001, SOC 2, NIST), OT/ICS security, AWS, OWASP tools, CSET
Preferred skills
SaaS experience, Critical infrastructure experience, Connected technology experience
Technologies
AWS, OWASP, CSET, NIST CSF, NIST 800-53, NIST SP 800-82
Responsibilities
Define vision and roadmap for Product Security; Embed security-by-design in SSDLC; Lead threat modeling and architectural risk assessments; Partner with Engineering to implement secure coding and security gates; Influence cloud architecture for resilience; Manage vulnerability lifecycle and oversee penetration testing; Partner with GRC/Sales on enterprise security reviews; Translate regulatory requirements into scalable controls.
Seniority
Senior, hands-on IC with strategic influence