Principal Security Architect, Product & Application

Cambridge Mobile Telematics•Cambridge, MA

12h•Hybrid

About The Position

We're hiring a Principal Security Architect I, Product & Application to own the security architecture of CMT's products. In this highly autonomous individual contributor role, you'll set the technical direction for product security and partner with engineering teams to design and deliver secure solutions. You'll remain hands-on with architecture while driving security strategy through technical leadership, influence, and sound engineering judgment rather than people management. You'll also define the security standards and guardrails for AI-powered products and AI development tools, enabling innovation while reducing security risk. CMT is looking for a Principal Security Architect I, Product & Application to help us change the world. CMT has helped protect over 65 million drivers and prevent over 126,000 crashes worldwide. We build AI to solve some of the most difficult challenges in mobility — understanding and reducing risk, detecting crashes, and getting people life-saving help. The problems are hard. The impact is real. No matter your role, your work will matter at CMT.

Requirements

Bachelor’s degree or equivalent years of experience and/or certification in a related field
7+ years of experience in security with deep expertise in application and product security architecture
Proven ability to set technical direction and drive security initiatives through influence in a highly autonomous role
Strong software engineering foundation with experience reviewing code and system architecture across web services, APIs, and mobile platforms
Deep knowledge of secure SDLC, threat modeling, OWASP, authentication, cryptography, API security, and mobile security
Experience securing products that process sensitive personal data while supporting privacy and regulatory requirements
Working knowledge of AI/ML and LLM security, including the secure adoption of AI development tools
Excellent written and verbal communication skills

Nice To Haves

Experience with mobile SDK security, reverse engineering, and anti-tampering
Familiarity with data-intensive architectures and ML-driven products
Experience developing AI governance or secure AI adoption programs
Experience in telematics, IoT, connected vehicles, fintech, or other high-trust industries
Relevant certifications such as CSSLP, OSCP, or GWEB

Responsibilities

Own the end-to-end security architecture for CMT's products, including mobile SDKs, backend services, APIs, data pipelines, and partner integrations
Define security standards, reference architectures, and engineering guardrails, and drive adoption across the organization
Partner with product and engineering leaders to embed security throughout the SDLC
Lead threat modeling and define application security strategy, including testing, secure coding, secrets management, and software supply chain security
Own security architecture for protecting sensitive data and supporting privacy and regulatory requirements
Define security architecture and guardrails for AI-powered products and AI development tools
Own the Product Security roadmap, including technology strategy, prioritization, and risk-based decision making
Serve as the senior security authority for architecture reviews, technical guidance, and customer security engagements
Mentor engineers and champion secure design practices across the organization
Complete any additional tasks as they arise