AI Security Architect – Senior Staff Threat Modeling Leader

Medallia, Inc.; McLean (VA); Hybrid; USD 184,000 - 245,000; Full time

Benefits offered by this job

Medical benefits

401(k)

Paid parental leave

Paid holidays

Job summary

Medallia, Inc. is seeking a Senior Staff Product Security Engineer to lead security strategy for AI-powered products and agentic systems. You will partner across Product, Engineering, Architecture, Data Science, and Security to embed security by design in AI features and platforms.

The role requires deep expertise in threat modeling, security architecture, and AI security, with focus on generative AI, LLMs, and BYOM capabilities. Hybrid work in Tysons Corner area preferred.

Qualifications

• 12+ years of experience in Product Security, Application Security, Security Architecture, or Security Engineering.
• Proven experience operating at Staff or Senior Staff level within a technology organization.
• Demonstrated expertise in Threat Modeling, Security Architecture Reviews, Application Security, Cloud Security, Secure SDLC, Vulnerability Management, Secure Design Principles.
• Experience securing modern architectures including APIs, Microservices, Kubernetes, Containers, Cloud-native platforms.
• Strong understanding of security frameworks and standards including OWASP, NIST, SOC 2, ISO 27001, PCI DSS.
• Demonstrated ability to influence engineering organizations and drive security outcomes without direct authority.

Responsibilities

• Serve as the technical authority for security reviews involving Generative AI applications, LLM-powered features, AI agents, agentic workflows, MCP integrations, AI skills and marketplaces, AI coding assistants, and BYOM capabilities.
• Define security requirements and guardrails for AI-enabled products and services.
• Evaluate emerging AI technologies and assess associated security risks.
• Partner with engineering and product teams to ensure AI features are secure by design.
• Lead threat modeling efforts for critical product and platform initiatives.
• Establish and scale a threat modeling program across engineering organizations.
• Conduct security architecture reviews for high-risk and strategic initiatives.
• Develop security reference architectures, design patterns, and guidance for engineering teams.
• Identify systemic security risks and drive long-term remediation strategies.
• Own and evolve Product Security assurance activities including security reviews, assessments, AI security reviews, testing strategies, and standards.
• Define risk-based approaches for evaluating emerging technologies.
• Partner with engineering teams to embed security validation throughout the SDLC.
• Establish secure development standards for AI-enabled applications.
• Drive adoption of secure coding practices across engineering teams.
• Develop scalable developer guidance and security enablement programs.
• Evaluate and implement approaches to improve security feedback during development, including AI-assisted security review capabilities.
• Identify opportunities to automate security reviews and reduce manual effort.
• Partner with security tooling owners to improve developer experience and security coverage.
• Define metrics that measure effectiveness of AI security and security assurance programs.
• Evaluate emerging security technologies relevant to AI and modern software development.
• Partner closely with Product, Engineering, Architecture, Data Science, Privacy, Legal, Compliance, and Operations teams.
• Influence technical direction through expertise and relationship-building.
• Mentor Staff and Senior Engineers in threat modeling, architecture reviews, and AI security.

Skills

Threat Modeling

Security Architecture

Application Security

Cloud Security

Secure SDLC

Vulnerability Management

Secure Design Principles

Tools

Kubernetes

Containers

Microservices

APIs

Cloud-native platforms

Job description

Medallia, Inc. is seeking a Senior Staff Product Security Engineer to lead security strategy for AI-powered products and agentic systems. You will partner across Product, Engineering, Architecture, Data Science, and Security to embed security by design in AI features and platforms.

The role requires deep expertise in threat modeling, security architecture, and AI security, with focus on generative AI, LLMs, and BYOM capabilities. Hybrid work in Tysons Corner area preferred.