Product Security Engineer securing Grid Automation products through SDL, threat modelling, and penetration testing. Managing vulnerabilities and incidents for Grid Automation cybersecurity solutions.
About the role
- AI Security Associate Architect at Thomson Reuters shaping AI-powered products' secure architecture. Collaborating to ensure deep integration of security in design and engineering processes.
Responsibilities
- Architect security across products and platforms by leading security architecture reviews
- Develop reference architectures and secure design patterns
- Lead Secure AI architecture by conducting Secure AI design reviews
- Build and evolve threat models for AI systems
- Drive threat modeling and risk-informed design across multiple architectures
- Partner with engineering as a trusted technical advisor
- Strengthen the Security Architecture practice
Requirements
- 7+ years of experience in security architecture, product security, application security, or cloud security engineering
- Demonstrated experience leading architecture and design reviews across multiple products or platforms
- Hands-on expertise with at least one major cloud platform (AWS, Azure, or Google Cloud)
- Practical experience securing modern application architectures (APIs, microservices, containers, Kubernetes)
- Working knowledge of GenAI and LLM security
- Strong understanding of core security principles (cryptography, public key infrastructure)
- Ability to engage deeply with technical teams
- Strong threat modeling skills and familiar with frameworks (OWASP ASVS, NIST CSF)
Benefits
- Hybrid Work Model: Flexible hybrid working environment (2-3 days a week in the office depending on the role)
- Flex My Way: Supportive workplace policies designed for personal and professional responsibilities
- Career Development and Growth: Culture of continuous learning and skill development
- Industry Competitive Benefits: Comprehensive benefit plans including flexible vacation, mental health days, retirement savings, tuition reimbursement
- Culture: Award-winning reputation for inclusion and belonging
- Social Impact: Two paid volunteer days off annually and opportunities for pro-bono consulting projects
Job title
Job type
Experience level
Salary
Degree requirement
Tech skills
Location requirements
Report this job
Found something wrong with the page? Please let us know by submitting a report below.
Product Security Engineer securing Grid Automation products for GE Vernova’s Grid Automation business. Applying SDL, vulnerability management, threat modeling, penetration testing and IEC 62443 standards.
Principal Security Architect securing Menlo Security’s browser and AI - agent protection platform. Leading cryptography, cloud, vulnerability, and product security architecture.
Senior Product Security Engineer building AI - driven SDLC security tooling for BeyondTrust’s identity security SaaS. Automating reviews, integrating CI/CD controls, and supporting product incident response.
BDC banking manager overseeing commercial loan security and disbursements across Western Canada. Coordinating due diligence, risk evaluation, lending partners and compliant loan funding.
Cybersecurity new graduate rotating through Intact’s 24 - month tech development program. Supporting threat detection, incident response, infrastructure security, and AI - enhanced security insights.
Red Team Security Engineer conducting cloud adversary simulations for Motive’s fleet - management platform. Assessing attack paths, validating detection coverage, and driving remediation with engineering teams.
Staff Product Security Architect securing GitLab’s DevSecOps orchestration platform. Driving architecture, threat modeling, prototypes, and systemic risk reduction across engineering.
Information Security Manager leading enterprise EUC governance technology deployment and product roadmaps at TD, a global financial institution. Driving risk controls, adoption, delivery and assurance across business segments.
Principal Cloud Security Engineer securing Pax8’s cloud marketplace, infrastructure, and AI - enabled platforms. Establishing cloud, Kubernetes, identity, and software - delivery security standards across USA and Canada.