Product Security Architect
About The Position
TP-Link Systems Inc. is seeking a Product Security Architect to lead product security architecture across its networking, smart home, and connected-device portfolio. Reporting to the Senior Director of Product Security, this senior technical leader advances secure-by-design practices across product lines and partners with R&D, product management, manufacturing, legal, and regulatory teams. The role ensures security is incorporated from concept through development, manufacturing, release, and ongoing support, and that products continue to meet applicable industry standards and regulatory requirements throughout their supported life. The Product Security Architect translates product security strategy into reusable security architectures, practical engineering requirements, and consistent design guidance for embedded, cloud, and mobile components. The role also provides technical leadership for architecture reviews, threat modeling, vulnerability response, and the integration of security tooling, automation, and AI-assisted analysis into engineering workflows.
Requirements
- 10+ years of experience in product security, embedded systems security, security architecture, secure product engineering, or a closely related technical field.
- Demonstrated experience building, scaling, or significantly improving a product security program for connected devices or other security-critical products.
- Principal architect, technical lead, or comparable senior individual-contributor experience spanning multiple products or engineering teams.
- Deep knowledge of embedded and connected-device security, especially trust boundaries, device identity, provisioning, applied cryptography, firmware integrity, and secure updates.
- Experience implementing SAST, SCA, or comparable tooling in a complex, multi-product build environment.
- A strong record of leading PSIRT work, complex vulnerability investigations, coordinated disclosure, root cause analysis, and remediation across products or platforms.
- Ability to translate regulatory and certification requirements into engineering controls and influence technical and business teams across a global organization.
- Familiarity with the EU Cyber Resilience Act, ETSI EN 303 645, UK PSTI, the U.S. Cyber Trust Mark, NIST IR 8259, and other related connected-product security requirements.
- Bachelor’s degree in Computer Science, Computer Engineering, Electrical Engineering, Cybersecurity, or a closely related technical discipline.
Nice To Haves
- Background in networking, telecommunications, consumer electronics, smart home products, or another industry where product security is essential.
- Experience with secure manufacturing, device provisioning, firmware signing, key injection, or product supply chain security.
- Comfort working with embedded Linux or RTOS products and complex firmware build environments.
- Experience establishing a product security tooling platform from scratch, including tool selection and rollout.
- Experience building or running AI-assisted security tools or workflows in a product security setting.
- Experience with product certification, conformity assessment, cybersecurity labeling, or regulatory readiness.
- Mandarin proficiency or experience working closely with engineering and manufacturing teams in China.
- Master’s degree in a relevant technical field.
Responsibilities
- Set the security architecture strategy for connected-device products.
- Develop security requirements, reference architectures, and design patterns for engineering teams.
- Lead threat modeling and security reviews for major products, platforms, and features.
- Guide security from initial design through end of support, including manufacturing and device provisioning.
- Provide technical direction for device identity, secure boot, roots of trust, code signing, key management, and secure updates.
- Integrate SAST, software composition analysis, SBOM generation, firmware analysis, and binary analysis into CI/CD pipelines and development workflows.
- Establish processes for tracking and resolving tool findings, third-party component risks, and software supply chain risks across products.
- Use AI and automation to accelerate and improve the consistency of architecture reviews, code analysis, vulnerability investigation, and remediation.
- Provide technical leadership for PSIRT and complex vulnerability investigations.
- Advise R&D, Product Management, Manufacturing, Legal, Regulatory, Communications, and company leadership on significant product security risks and decisions.
- Mentor security and engineering teams.
- Represent Product Security with customers, security researchers, certification bodies, and other external stakeholders when needed.
Benefits
- Fully paid medical, dental, and vision insurance, with partial coverage for dependents.
- Contributions to 401k funds.
- Over four weeks of PTO per year.
- Bi-annual pay increases.
- Health and wellness benefits, including a free gym membership.
- Quarterly team-building events.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
