Product Security Architect

Keysight Technologies, Inc.•Loveland, CO

4d•Hybrid

About The Position

Keysight is at the forefront of technology innovation, delivering breakthroughs and trusted insights in electronic design, simulation, prototyping, test, manufacturing, and optimization. Our ~16,800 employees create world-class solutions in communications, 5G, automotive, energy, quantum, aerospace, defense, and semiconductor markets for customers in over 100 countries. Our award-winning culture embraces a bold vision of where technology can take us and a passion for tackling challenging problems with industry-first solutions. We believe that when people feel a sense of belonging, they can be more creative, innovative, and thrive at all points in their careers. Our Product Security organization partners with engineering teams across the company to embed security into the full product lifecycle—from concept and architecture through development, release, and sustainment. We are seeking a highly experienced Product Security Architect to lead the end-to-end security architecture for Keysight’s software products and platforms. The ideal candidate brings deep experience partnering with software engineering, platform, and product leadership teams to drive security outcomes at scale. This role is expected to define reference architectures, lead threat modeling and security design reviews, establish product security standards, guide risk-based decisions, and influence the adoption of secure development practices, vulnerability management, and security verification across a diverse portfolio of products and technologies.

Requirements

8+ years of experience in product security, application security, software architecture, or a related security engineering discipline
Demonstrated experience leading threat modeling, secure architecture reviews, and risk assessments for complex software products or platforms
Strong hands-on knowledge of secure software development, vulnerability management, and security testing approaches including SAST, DAST, SCA, and related tooling
Solid software engineering or architecture background with experience in languages such as Java, C#, C, C++, or similar technology stacks
Bachelor’s degree in computer science, computer engineering, cybersecurity, or equivalent practical experience; advanced degree preferred
Deep understanding of secure design principles, authentication and authorization models, cryptography fundamentals, cloud and platform security, and common application attack patterns
Experience influencing cross-functional teams, driving standards adoption, and communicating security tradeoffs to technical and business stakeholders
Knowledge of the EU Cyber Resilience Act (CRA) and related product security regulatory requirements, with the ability to translate compliance expectations into practical security architecture and engineering guidance
Maintains current knowledge of security technologies and industry trends, and applies that knowledge to evaluate, recommend, and implement scalable security solutions

Nice To Haves

advanced degree preferred

Responsibilities

Lead security architecture reviews for software products and platforms, providing design guidance that aligns business objectives, scalability, and security requirements
Define and maintain product security reference architectures, design patterns, and engineering standards across the software development lifecycle
Partner with engineering and product leaders to perform threat modeling, architecture risk assessments, and security design reviews for new and existing offerings
Drive adoption and effective use of secure development practices and security tooling, including SAST, DAST, SCA, secrets detection, and CI/CD security controls
Establish risk-based approaches for vulnerability triage, remediation planning, exception handling, and security verification across multiple product teams
Research, evaluate, and introduce security technologies and automation that improve developer experience and scale product security operations
Provide technical leadership and mentorship to engineers and security practitioners, influencing security strategy, roadmap priorities, and long-term architectural direction
Stay current on emerging threats, vulnerabilities, regulatory expectations, and industry best practices, translating them into actionable guidance for product teams