Principal Security Architect securing Menlo Security’s browser and AI - agent protection platform. Leading cryptography, cloud, vulnerability, and product security architecture.
About the role
- Manager, Product Security leading a senior team at Thomson Reuters to secure products end-to-end. Overseeing Secure SDLC, Secure AI, and automation to enhance security capabilities.
Responsibilities
- Lead and grow the Product Security team, managing and developing senior Product Security Engineers
- Own and execute the Product Security program across multiple products and cloud platforms
- Lead Secure AI for products, defining security measures for AI-powered customer features
- Build and operate security automation and AI-enabled capabilities
- Deliver self-service security tooling, APIs, and security champion programs
- Operate a security data and analytics layer to support risk-based prioritization
Requirements
- 8+ years of experience in product security, application security, or software security engineering
- Demonstrated ownership of a Secure SDLC program across a multi-product engineering organization
- Hands-on experience with at least one major cloud platform (AWS, Azure, or Google Cloud)
- Strong software engineering instincts; ability to read and write code in Python, Go, or similar languages
- Working knowledge of GenAI and LLM security
- Experience scaling security through developer-friendly tools, APIs, automation, and CI/CD-native controls
- Excellent written and verbal communication skills
Benefits
- Hybrid Work Model: flexible hybrid working environment (2-3 days a week in the office)
- Flex My Way: supportive workplace policies for personal and professional responsibilities
- Career Development and Growth: culture of continuous learning and skill development
- Industry Competitive Benefits: comprehensive benefit plans including flexible vacation, Mental Health Days, retirement savings, tuition reimbursement, and mental, physical, and financial wellbeing resources
- Social Impact: two paid volunteer days off annually, participation in pro-bono consulting projects, and ESG initiatives
Job title
Job type
Experience level
Salary
Degree requirement
Tech skills
Location requirements
Report this job
Found something wrong with the page? Please let us know by submitting a report below.
Senior Product Security Engineer building AI - driven SDLC security tooling for BeyondTrust’s identity security SaaS. Automating reviews, integrating CI/CD controls, and supporting product incident response.
BDC banking manager overseeing commercial loan security and disbursements across Western Canada. Coordinating due diligence, risk evaluation, lending partners and compliant loan funding.
Cybersecurity new graduate rotating through Intact’s 24 - month tech development program. Supporting threat detection, incident response, infrastructure security, and AI - enhanced security insights.
Red Team Security Engineer conducting cloud adversary simulations for Motive’s fleet - management platform. Assessing attack paths, validating detection coverage, and driving remediation with engineering teams.
Staff Product Security Architect securing GitLab’s DevSecOps orchestration platform. Driving architecture, threat modeling, prototypes, and systemic risk reduction across engineering.
Information Security Manager leading enterprise EUC governance technology deployment and product roadmaps at TD, a global financial institution. Driving risk controls, adoption, delivery and assurance across business segments.
Principal Cloud Security Engineer securing Pax8’s cloud marketplace, infrastructure, and AI - enabled platforms. Establishing cloud, Kubernetes, identity, and software - delivery security standards across USA and Canada.
Cyber Security Engineer auditing diverse codebases, fixing vulnerabilities, and optimizing backend software. Contributing security insights and improvements to AI training datasets for a technology company.
Senior Associate designing cloud, application, and AI security solutions for PwC Canada’s consulting clients. Leading technical delivery pods and embedding DevSecOps across client environments.