Senior Product Security Architect

Motorola Solutions•Richmond, UT

21h

About The Position

At Motorola Solutions, we believe that everything starts with our people. We’re a global close-knit community, united by the relentless pursuit to help keep people safer everywhere. We build and connect technologies to help protect people, property and places. Our solutions foster the collaboration that’s critical for safer communities, safer schools, safer hospitals, safer businesses, and ultimately, safer nations. Connect with a career that matters, and help us build a safer future. Department Overview Motorola's Access Control Division's (previously OpenPath, now Avigilon Alta) mission is to improve your workday with smart office technology at your front door. We are looking for candidates who can help us build, scale and innovate as we develop our industry leading platform for access control and office automation. Strong analytical and software skills are a must in order to join our team, and we are particularly seeking candidates with experience and skills in multiple technologies, in order to contribute broadly to our team-centric approach to product development. Job Description Responsibilities: Lead the design and implementation of secure architectures across products and services. Perform threat modeling, risk assessments, and architecture reviews to identify and mitigate risks. Proven experience in developing and implementing threat modeling programs (e.g., STRIDE, PASTA, DREAD). Demonstrable experience in securing cloud environments (e.g. AWS and Azure) Experience with defining and enforcing technical security standards and controls. Solid understanding of secure software development lifecycle (SSDLC) principles and practices. Partner with engineering teams to ensure secure coding practices and adoption of industry best practices Define and oversee the implementation of security testing, including SAST, DAST, and penetration testing. Ensure products comply with relevant security standards, certifications, and regulations (e.g., OWASP, NIST, ISO 27001, CIS, PCI DSS, ATT&CK, D3FEND, CIS, CSF, CAF.) Support product security incident response processes, including root cause analysis and mitigation strategies. Monitor emerging security threats, vulnerabilities, and trends to proactively investigate, remediate, and integrate new protections. Drive continuous improvement of product security posture by identifying gaps and implementing solutions. Develop and maintain security architecture documentation, guidelines, and framework Cybersecurity Leadership Overseeing product infrastructure security, endpoint protection, and threat monitoring Maintain incident response plans and conduct simulations across U.S. and EU teams Oversee vulnerability management and phishing simulations Collaborate with internal and external stakeholders to enforce secure development lifecycle practices Evaluate and recommend new tools and platforms to support threat prevention, detection, and response Team & Cross-Functional Leadership Coordinate information security and data protection initiatives ensuring alignment with corporate goals Serve as a strategic partner to IT and Engineering teams on risk matters

Requirements

Bachelor’s degree in Information Security, Computer Science, or related field
8+ years of progressive experience in product security and/or cybersecurity
Strong understanding of technical concepts: SAST, DAST, SCM, IdP, Kernel, Firmware, WAF, firewalls, IDS/IPS, SIEM, cloud security, etc.
Knowledge of major frameworks: SOC 2, ISO 27001, GDPR, NIST, HIPAA, etc.
Experience with cross-border regulatory compliance (especially EU data privacy)
Legal authorization to work in the U.S. indefinitely is required.
5+ years of experience in product security, cybersecurity, and/or regulatory compliance

Nice To Haves

Certifications such as CSSP, CEH, CISM, CISSP, CISA, CRISC are strongly preferred.
Excellent verbal and written communication, able to liaise effectively with both technical and non-technical teams
High emotional intelligence experience across cultures/time zones
Experience in a high-growth tech environment or SaaS business
Calm under pressure—especially during incidents or audits
Familiarity with security considerations for AI/ML systems is highly desirable

Responsibilities

Lead the design and implementation of secure architectures across products and services.
Perform threat modeling, risk assessments, and architecture reviews to identify and mitigate risks.
Proven experience in developing and implementing threat modeling programs (e.g., STRIDE, PASTA, DREAD).
Demonstrable experience in securing cloud environments (e.g. AWS and Azure)
Experience with defining and enforcing technical security standards and controls.
Solid understanding of secure software development lifecycle (SSDLC) principles and practices.
Partner with engineering teams to ensure secure coding practices and adoption of industry best practices
Define and oversee the implementation of security testing, including SAST, DAST, and penetration testing.
Ensure products comply with relevant security standards, certifications, and regulations (e.g., OWASP, NIST, ISO 27001, CIS, PCI DSS, ATT&CK, D3FEND, CIS, CSF, CAF.)
Support product security incident response processes, including root cause analysis and mitigation strategies.
Monitor emerging security threats, vulnerabilities, and trends to proactively investigate, remediate, and integrate new protections.
Drive continuous improvement of product security posture by identifying gaps and implementing solutions.
Develop and maintain security architecture documentation, guidelines, and framework
Overseeing product infrastructure security, endpoint protection, and threat monitoring
Maintain incident response plans and conduct simulations across U.S. and EU teams
Oversee vulnerability management and phishing simulations
Collaborate with internal and external stakeholders to enforce secure development lifecycle practices
Evaluate and recommend new tools and platforms to support threat prevention, detection, and response
Coordinate information security and data protection initiatives ensuring alignment with corporate goals
Serve as a strategic partner to IT and Engineering teams on risk matters