Product Security Engineer Senior

Acuity Inc.•Conyers, GA

2d•$120,800 - $261,000

About The Position

Acuity Brands is seeking a highly experienced and hands-on Security Architect to lead the design and implementation of secure architectures across our cloud-native platforms, connected products, and enterprise applications. This role requires strong expertise in cloud security (Azure-first), CNAPP, and modern DevSecOps practices, with a focus on proactively reducing risk across infrastructure, workloads, and application pipelines. You will drive security across the full product lifecycle—embedding controls into architecture, development, and operations—while partnering closely with engineering, DevOps, and platform teams.

Requirements

Cloud Security Architecture & CNAPP
Bachelor of Science in Computer Science or Information Technology

Nice To Haves

Effectively document and communicate security assessment findings, recommendations, and remediation strategies to a diverse audience, including technical teams and non-technical business stakeholders, ensuring clarity and actionable guidance for all parties involved.
Demonstrable ability to analyze business direction and problems, understand long term vision and risk in developing strategic technical solutions.
Azure Security Certifications are a plus

Responsibilities

Lead secure design and architecture reviews for cloud-native and distributed systems, including IoT-integrated platforms
Experience with leading CNAPP platforms such as Microsoft Defender for Cloud, Prisma Cloud, Wiz, Orca Security, or Lacework, including their use for posture management, workload protection, and identity risk analysis.
Own and drive Cloud-Native Application Protection Platform (CNAPP) capabilities, including: CSPM (posture management and misconfiguration detection), CWPP (runtime protection for VMs, containers, serverless), CIEM (identity entitlement and least privilege enforcement)
Kubernetes and container security (AKS, image hardening, runtime controls)
Experience defining and enforcing cloud security guardrails, landing zone controls, and policy-as-code frameworks
Define and enforce cloud security baselines, guardrails, and landing zone standards
Assess and secure: AKS/Kubernetes environments, Infrastructure-as-Code (Terraform, ARM, Bicep), Service-to-service and API communication patterns
Integrate security controls into CI/CD pipelines, enabling both shift-left and runtime security
Drive adoption of: SAST, DAST, SCA Toolchain, Container and IaC scanning, Policy-as-code for scalable enforcement
Define and maintain cloud security standards, patterns, and reusable controls
Drive continuous improvement in security posture and maturity across development teams
Influence cross-functional teams to adopt secure-by-design and Zero Trust principles