Principal Security Architect - AI Product & App Security

Cambridge Mobile Telematics; Cambridge (MA); On-site; USD 130,600 - 163,300; Full time

Benefits offered by this job

Equity RSUs

Full benefits (medical, dental, vision

401k match

Unlimited PTO

Flexible scheduling

Summer Fridays

Job summary

Cambridge Mobile Telematics (CMT) is seeking a Principal Security Architect I, Product & Application to own the security architecture of our products. You will define security standards, drive SDLC security, and collaborate with engineering to deliver secure solutions.

In this autonomous role, you will set technical direction, mentor engineers, and shape AI security for our AI-powered tools while ensuring privacy and regulatory compliance across mobile SDKs, backend services, and data

Qualifications

• Bachelor’s degree or equivalent years of experience and/or certification in a related field.
• 7+ years of experience in security with deep expertise in application and product security architecture.
• Proven ability to set technical direction and drive security initiatives through influence in a highly autonomous role.
• Strong software engineering foundation with experience reviewing code and system architecture across web services, APIs, and mobile platforms.
• Deep knowledge of secure SDLC, threat modeling, OWASP, authentication, cryptography, API security, and mobile security.
• Experience securing products that process sensitive personal data while supporting privacy and regulatory requirements.
• Working knowledge of AI/ML and LLM security, including the secure adoption of AI development tools.
• Excellent written and verbal communication skills.

Responsibilities

• Own the end-to-end security architecture for CMT's products, including mobile SDKs, backend services, APIs, data pipelines, and partner integrations
• Define security standards, reference architectures, and engineering guardrails, and drive adoption across the organization
• Partner with product and engineering leaders to embed security throughout the SDLC
• Lead threat modeling and define application security strategy, including testing, secure coding, secrets management, and software supply chain security
• Own security architecture for protecting sensitive data and supporting privacy and regulatory requirements
• Define security architecture and guardrails for AI‑powered products and AI development tools
• Own the Product Security roadmap, including technology strategy, prioritization, and risk‑based decision making
• Serve as the senior security authority for architecture reviews, technical guidance, and customer security engagements
• Mentor engineers and champion secure design practices across the organization
• Complete any additional tasks as they arise

Skills

Security architecture

Product security

Threat modeling

AI/ML security

Security strategy

SDLC security

API security

Mobile security

Code review

Communication

Education

Bachelor’s degree

Job description

Cambridge Mobile Telematics (CMT) is seeking a Principal Security Architect I, Product & Application to own the security architecture of our products. You will define security standards, drive SDLC security, and collaborate with engineering to deliver secure solutions.

In this autonomous role, you will set technical direction, mentor engineers, and shape AI security for our AI-powered tools while ensuring privacy and regulatory compliance across mobile SDKs, backend services, and data