Senior Product Security Architect

Entrust; Cambridge; Hybrid; GBP 90,000 - 130,000; Full time

Job summary

Entrust is seeking a Staff Product Security Engineer in Cambridge. You will define security strategy across cryptographic product lines, influence multiple engineering teams, and embed secure design throughout the product lifecycle.

You will lead threat modeling, security testing, and certification activities, mentoring engineers and coordinating with product management, certification teams, and executives to strengthen security posture and regulatory readiness.

Qualifications

• Bachelor's degree in Computer Science, Information Security, Electrical Engineering, Mathematics, or related discipline.
• Master's degree preferred.
• Relevant security certifications (CISSP, CSSLP, OSCP, GIAC, CCSP, SABSA, or similar) are desirable.
• Demonstrated track record of leading complex security initiatives with organization-wide impact.

Responsibilities

• Define and drive product security strategy, architecture principles, and roadmaps across products.
• Lead security architecture reviews for new products and major features.
• Mentor engineers and lead secure development practices and code reviews.
• Collaborate with product management, certification teams, and executives on security roadmaps.

Skills

Product security

Security architecture

Threat modeling

Vulnerability management

Programming: Python, C/C++, Go, Rust,/

Education

Bachelor's degree in CS/InfoSec/EE/Math

Master's degree preferred

Tools

SCA (Software Composition Analysis)

Static analysis

Dynamic analysis

Fuzzing

CI/CD security tooling

Job description

Entrust is seeking a Staff Product Security Engineer in Cambridge. You will define security strategy across cryptographic product lines, influence multiple engineering teams, and embed secure design throughout the product lifecycle.

You will lead threat modeling, security testing, and certification activities, mentoring engineers and coordinating with product management, certification teams, and executives to strengthen security posture and regulatory readiness.