Senior Product Security Architect - Remote

CyberArk•Atlanta, GA

27d•Remote

About The Position

Join our Engineering Security Architecture team as a Senior Product Security Architect and help shape the future of secure product development. In this role, you’ll partner directly with Development and SRE teams to embed security into every stage of the SSDLC—ensuring our cloud-native platform is resilient, scalable, and built with secure architecture at its foundation. If you’re passionate about influencing engineering decisions, guiding secure design, and driving security maturity across R&D, this is your opportunity.

Requirements

Product Application Security
Secure design for microservices and APIs
Threat modeling and vulnerability analysis
Understanding how OWASP categories behave in distributed systems
Strong comfort with code-adjacent conversations (flows, architecture, data paths)
Secure SDLC inside engineering
Embedded partnership with dev teams
Experience shaping secure coding patterns, code review workflows, and CI/CD expectations
Ability to balance security with engineering velocity
Container / Cloud-Native Security
Familiarity with container/K8s security concepts and tooling
Understanding of workload identity, runtime protections, and image integrity
Architecture Leadership
Ability to influence engineering decisions and drive secure architecture across teams
Strong communication skills with developers and engineering leaders

Nice To Haves

FedRAMP understanding at the architecture level
Awareness of secure AI/ML development patterns and emerging LLM/ML risks

Responsibilities

Embed security throughout the SSDLC
Partner with engineering teams to integrate secure design into microservices, APIs, and distributed systems
Lead threat modeling, secure design reviews, and architecture conversations
Drive secure coding expectations and secure defaults across multiple teams
Strengthen engineering practices
Guide teams through OWASP reasoning, protocol-level topics (TLS, mTLS, token flows), and secure design patterns
Improve SSDLC processes, tooling, and CI/CD security
Support architecture reviews and influence long-term technology strategy
Container & cloud-native security
Evaluate and help onboard container/K8s security tooling
Provide guidance on runtime risks, image vulnerabilities, supply chain exposure, and K8s posture
Define “what good looks like” for cloud-native workloads
Cross-R&D leadership
Build trust quickly with Development, SRE, and Product
Communicate risk clearly and guide engineering tradeoffs
Lead cross-team security initiatives that raise maturity across the organization
Deliver training, mentorship, and awareness programs
Support incident response and drive post-incident improvements
Continuously research emerging threats and technologies
Update security policies, standards, and architecture principles as the product evolves