Senior Product Security Architect

Creative Information Technology, Inc.; Cambridge; Hybrid; GBP 90,000 - 150,000; Full time

Job summary

Entrust is seeking a Staff Product Security Engineer to define and drive security strategy across a cryptographic product portfolio. You will influence engineering teams, establish security roadmaps, and embed secure-by-design principles throughout the lifecycle.

You will lead complex security initiatives, mentor engineers, and engage with customers, auditors, and certification bodies to address threats and ensure regulatory readiness.

Qualifications

• Extensive experience in product security, security architecture, or security engineering roles.
• Demonstrated experience providing technical leadership across multiple teams, products, or business units.
• Deep expertise in applied cryptography, cryptographic protocols, and security architectures.
• Strong understanding of secure software development and software assurance practices.
• Strong understanding of hardware security, embedded systems security, trusted execution environments, and FPGA security concepts.
• Advanced knowledge of threat modeling methodologies and risk assessment frameworks.
• Experience leading large-scale vulnerability management and remediation programs.
• Expertise with security assessment methodologies, penetration testing techniques, and offensive security concepts.
• Experience building or deploying security tooling integrated into modern software development pipelines.
• Strong programming capability in Python, C/C++, Go, Rust, Java, or similar languages.
• Experience supporting or leading security certification activities including FIPS 140-3, Common Criteria, PCI HSM, or equivalent frameworks.
• Strong understanding of modern regulatory and compliance requirements impacting product security, including CRA, NIS2, and secure development frameworks.
• Excellent communication skills with demonstrated ability to influence executive stakeholders and technical teams.
• Proven ability to drive organizational change through technical leadership and influence.

Responsibilities

• Define and drive product security strategy, architecture principles, and security engineering roadmaps across multiple products and platforms.
• Lead the security architecture review process for new products, major feature developments, and platform changes.
• Establish and evolve secure development standards, security design patterns, and engineering best practices.
• Serve as the primary technical authority for complex security architecture decisions and risk-based security trade-off discussions.
• Drive strategic security initiatives that improve security posture, development efficiency, and regulatory readiness across the organization.
• Anticipate emerging threats, industry trends, and regulatory requirements and translate these into actionable engineering improvements.
• Collaborate with cross-functional teams to integrate security requirements into product design, development, deployment, and maintenance processes.
• Lead threat modeling activities for critical systems, products, and architectures.
• Conduct and oversee advanced security assessments, vulnerability investigations, attack surface analyses, and risk evaluations.
• Design, implement, and review security controls, cryptographic protections, and system hardening mechanisms.
• Lead investigations of critical security issues and provide technical direction for remediation efforts.
• Guide secure design reviews and code review activities for business-critical products.

Skills

Cryptography

Security architecture

Secure software development

Hardware security

Threat modeling

Vulnerability management

Security tooling

Programmatic languages

Education

Bachelor's degree in Computer Science

Master's degree preferred

Tools

CI/CD security tooling

FIPS 140-3 / Common Criteria knowledge

Job description

Entrust is seeking a Staff Product Security Engineer to define and drive security strategy across a cryptographic product portfolio. You will influence engineering teams, establish security roadmaps, and embed secure-by-design principles throughout the lifecycle.

You will lead complex security initiatives, mentor engineers, and engage with customers, auditors, and certification bodies to address threats and ensure regulatory readiness.