Product Security Engineer securing Grid Automation products through SDL, threat modelling, and penetration testing. Managing vulnerabilities and incidents for Grid Automation cybersecurity solutions.
About the role
- Senior Principal Security Architect shaping enterprise security architecture for Invesco, a global investment-management firm. Leading cloud, identity, network, data-protection, and risk initiatives.
Responsibilities
- Define and execute enterprise security architecture strategies, standards, reference architectures, design patterns, and guidelines aligned with business objectives and technology modernization efforts
- Partner with business leaders, enterprise architects, engineering teams, and security stakeholders to embed security requirements into technology roadmaps, cloud adoption, and transformation initiatives
- Define security functional and non-functional requirements that support business objectives and strengthen solution design
- Assess the effectiveness of security controls across data protection, identity and access management, security monitoring, detective controls, infrastructure/network security, and incident response
- Recommend controls, processes, and remediation actions to address gaps and reduce risk
- Research, evaluate, and advocate for emerging technologies, architectures, and security products that advance the security maturity roadmap
- Act as a subject matter expert for advisory, review and approval of security designs, configurations, baselines, and technical standards
- Mentor security architects and technical teams, promoting architectural excellence, knowledge sharing, and clear communication of complex security concepts to technical and business audiences
- Perform other duties as assigned
Requirements
- 15+ years of progressive IT experience, including 10+ years focused on cybersecurity, security architecture, and enterprise architecture in large, complex organizations
- 5+ years of experience with cloud delivery platforms, including IaaS, PaaS, and SaaS, and providers such as Amazon Web Services (AWS) and Microsoft Azure
- Strong background across cloud security, Zero Trust, networking, identity and access management, data protection, AI platforms, and risk management
- Experience leading enterprise-wide security initiatives, including architecture, implementation, and adoption of security solutions and processes
- Ability to engage senior leaders, define requirements, and clearly communicate security risks, decisions, and recommendations
- Expertise in two or more technology domains, such as infrastructure, application security, network security, IAM, data protection, endpoint security or AI security
- Knowledge of industry security control frameworks such as NIST, CSA CCM, and CIS Critical Security Controls
- Proficiency with architecture modeling using industry-standard notation languages, such as ArchiMate
- Willingness to travel both domestically and internationally
- Strong ability to influence across technical, business, and executive stakeholders
- Collaborative team player with strong communication, organization, and facilitation skills
- High-energy, confident professional with an ability to remain calm and take control in a crisis
- Ability to see the big picture and think and act strategically
- Self-motivated and able to work independently with minimal direction
- Open-minded, flexible, and receptive to diverse perspectives; able to adapt to changing demands and conditions
- Committed to continuous learning, capability development, and mentoring others
- Bachelor’s degree in computer science, information systems, or a related field, or equivalent demonstrated experience
- Certified Information Systems Security Professional (CISSP) or equivalent certification
- Certification in enterprise architecture methodology or framework, such as TOGAF or SABSA, preferred
- Cloud Security Professional (CCSP), CCSK, or relevant vendor certifications from AWS or Microsoft Azure preferred
Benefits
- Flexible paid time off
- Hybrid work schedule
- 401(K) matching of 100% up to the first 6% with a discretionary supplemental contribution
- Health & wellbeing benefits
- Parental Leave benefits
- Employee stock purchase plan
Job title
Job type
Experience level
Salary
Degree requirement
Tech skills
Location requirements
Report this job
Found something wrong with the page? Please let us know by submitting a report below.
Product Security Engineer securing Grid Automation products for GE Vernova’s Grid Automation business. Applying SDL, vulnerability management, threat modeling, penetration testing and IEC 62443 standards.
Principal Security Architect securing Menlo Security’s browser and AI - agent protection platform. Leading cryptography, cloud, vulnerability, and product security architecture.
Senior Product Security Engineer building AI - driven SDLC security tooling for BeyondTrust’s identity security SaaS. Automating reviews, integrating CI/CD controls, and supporting product incident response.
BDC banking manager overseeing commercial loan security and disbursements across Western Canada. Coordinating due diligence, risk evaluation, lending partners and compliant loan funding.
Cybersecurity new graduate rotating through Intact’s 24 - month tech development program. Supporting threat detection, incident response, infrastructure security, and AI - enhanced security insights.
Red Team Security Engineer conducting cloud adversary simulations for Motive’s fleet - management platform. Assessing attack paths, validating detection coverage, and driving remediation with engineering teams.
Staff Product Security Architect securing GitLab’s DevSecOps orchestration platform. Driving architecture, threat modeling, prototypes, and systemic risk reduction across engineering.
Information Security Manager leading enterprise EUC governance technology deployment and product roadmaps at TD, a global financial institution. Driving risk controls, adoption, delivery and assurance across business segments.
Principal Cloud Security Engineer securing Pax8’s cloud marketplace, infrastructure, and AI - enabled platforms. Establishing cloud, Kubernetes, identity, and software - delivery security standards across USA and Canada.