Product Security Architect

MX Technologies, Inc.•Lehi, UT

About The Position

The Product Security Architect champions secure development, application security, and the secure adoption of AI throughout MX. Working with Engineering and Product teams, this role ensures applications use secure patterns, reviews changes to existing applications, and helps ensure the underlying infrastructure, systems, and AI services are managed securely. As a member of the Information Security department, the architect helps build security capabilities, controls, and standards, using AI to scale and automate security work. The role embeds security and automation into DevOps, SRE, and engineering processes, and builds security into how MX develops and uses AI.

Requirements

Bachelor’s degree in Computer Science, Information Security, or a related field, or equivalent practical experience.
12+ years of experience in Application Security, Application Architecture, DevOps, or a related field.
Solid understanding of automation tooling, primarily CI/CD pipelines and containers, and experience using AI tools to automate or accelerate security work.
Solid understanding of computer security principles and development processes, including AI-specific threats and frameworks.
Deep understanding of software dependencies and related vulnerabilities, and secure use of software repositories and open source software, extending to AI models, datasets, and AI-generated code.
Knowledge of secure coding principles in 2–3 languages and ability to collaborate with developers, including guiding secure use of AI coding assistants.
Excellent communication skills and ability to engage with technical and non-technical departments and teams.

Nice To Haves

Master’s degree or PhD in Computer Science, Information Security, or a related field.
Hands-on experience securing applications that use LLMs, ML models, or AI agents.
Knowledge of financial industry regulations, such as SOC 2 and PCI.
Experience in a regulated, fintech, or SaaS environment.
Track record of mentoring engineers or acting as a team lead.

Responsibilities

Architect security systems and designs to secure MX’s platform and products, including AI- and LLM-powered features in cloud and on-premises/colocation environments.
Mature the Security Architecture review program and processes, including review criteria for traditional applications and AI systems such as agents, RAG pipelines, and model and tool integrations.
Automate application security tooling within CI/CD, using AI-assisted analysis to triage findings, reduce false positives, and suggest fixes to developers.
Ensure software is developed securely using resilient architectures and patterns, including guardrails for AI features that handle customer or financial data.
Partner with Platform and DevOps teams to implement security architecture through threat models, tooling, and automation for Kubernetes, AWS/GCP, and the AI services and models running on them.
Establish SDLC security checkpoints and standards for secure coding, including safe use of AI coding assistants and review of AI-generated code.
Write automation scripts, Terraform, custom SAST/IAST rules, and integration code to embed security controls into engineering workflows.
Track the threat landscape for MX products and software, including AI-specific threats such as the OWASP Top 10 for LLM Applications and MITRE ATLAS, and create controls accordingly.
Serve as a subject matter expert in application security architecture and AI security architecture.
Assess third-party software and AI vendors for security risk and help shape MX’s AI governance.
Support security engineering initiatives by guiding and mentoring engineers across the security organization.
Partner with stakeholders to mature a Security Champion program that embeds security in development workflows and empowers engineering teams to identify and remediate findings.