Principal Security Architect, Product & Application

Cambridge Mobile Telematics; Massachusetts; On-site; USD 120,000 - 150,000; Full time

Benefits offered by this job

Unlimited Paid Time Off

Flexible scheduling and work from home policy

Annual performance bonus

Medical, Dental, Vision insurance

Equity in the form of RSUs

Job summary

Cambridge Mobile Telematics is looking for a Principal Security Architect I to own the security architecture of their products. In this autonomous role, you will guide technical direction for product security and work with engineering teams to deliver secure solutions.

The ideal candidate will have over 7 years of experience in security architecture, defining security standards, and driving security initiatives to enable innovative AI-powered products. Join us at CMT to make the world's roads and drivers safer.

Qualifications

• 7+ years of experience in security with deep expertise in application and product security architecture.
• Strong software engineering foundation with experience reviewing code and system architecture across web services, APIs, and mobile platforms.
• Excellent written and verbal communication skills.

Responsibilities

• Own the end‑to‑end security architecture for CMT's products.
• Define security standards and drive adoption across the organization.
• Lead threat modeling and define application security strategy.

Skills

Application and Product Security Architecture

Threat Modeling

Secure SDLC

OWASP

Cryptography

API Security

Mobile Security

AI/ML Security

Education

Bachelor's degree in a related field

Job description

We're hiring a Principal Security Architect I, Product & Application to own the security architecture of CMT's products. In this highly autonomous individual contributor role, you'll set the technical direction for product security and partner with engineering teams to design and deliver secure solutions.

You'll remain hands‑on with architecture while driving security strategy through technical leadership, influence, and sound engineering judgment rather than people management.

You'll also define the security standards and guardrails for AI‑powered products and AI development tools, enabling innovation while reducing security risk.

CMT is looking for a Principal Security Architect I, Product & Application to help us change the world. CMT has helped protect over 65 million drivers and prevent over 126,000 crashes worldwide. We build AI to solve some of the most difficult challenges in mobility—understanding and reducing risk, detecting crashes, and providing life‑saving help. The problems are hard. The impact is real. No matter your role, your work will matter at CMT.

Responsibilities

• Own the end‑to‑end security architecture for CMT's products, including mobile SDKs, backend services, APIs, data pipelines, and partner integrations
• Define security standards, reference architectures, and engineering guardrails, and drive adoption across the organization
• Partner with product and engineering leaders to embed security throughout the SDLC
• Lead threat modeling and define application security strategy, including testing, secure coding, secrets management, and software supply chain security
• Own security architecture for protecting sensitive data and supporting privacy and regulatory requirements
• Define security architecture and guardrails for AI‑powered products and AI development tools
• Own the Product Security roadmap, including technology strategy, prioritization, and risk‑based decision making
• Serve as the senior security authority for architecture reviews, technical guidance, and customer security engagements
• Mentor engineers and champion secure design practices across the organization
• Complete any additional tasks as they arise

Qualifications

• Bachelor's degree or equivalent years of experience and/or certification in a related field
• 7+ years of experience in security with deep expertise in application and product security architecture
• Proven ability to set technical direction and drive security initiatives through influence in a highly autonomous role
• Strong software engineering foundation with experience reviewing code and system architecture across web services, APIs, and mobile platforms
• Deep knowledge of secure SDLC, threat modeling, OWASP, authentication, cryptography, API security, and mobile security
• Experience securing products that process sensitive personal data while supporting privacy and regulatory requirements
• Working knowledge of AI/ML and LLM security, including the secure adoption of AI development tools
• Excellent written and verbal communication skills

Nice to Haves

• Experience with mobile SDK security, reverse engineering, and anti‑tampering
• Familiarity with data‑intensive architectures and ML‑driven products
• Experience developing AI governance or secure AI adoption programs
• Experience in telematics, IoT, connected vehicles, fintech, or other high‑trust industries
• Relevant certifications such as CSSLP, OSCP, or GWEB

Compensation and Benefits

• Fair and competitive salary based on skills and experience, and annual performance bonus
• Equity may be awarded in the form of Restricted Stock Units (RSUs)
• Medical, Dental, Vision and Life Insurance, matching 401k, short‑term & long‑term disability and parental leave
• Unlimited Paid Time Off including vacation, sick days & public holidays
• Flexible scheduling and work from home policy depending on role and responsibilities

Additional Perks

• Work on a mission with real impact: crashes prevented, injuries avoided, lives protected around the world
• Join an industry leader — 65 million drivers protected, powering 140+ programs across 25 countries
• Recognized innovator in mobility AI, earning top honors including the TIME Industry Leader in AI, a Gold Edison Award, and the Artificial Intelligence Excellence Award for AI for Social Good. CMT is also Great Place to Work Certified
• Be part of the team inventing the future of mobility and road safety
• Move fast, own outcomes, do work that matters
• High ownership, small teams, and direct access to leadership — no layers between your work and its impact
• Unlimited PTO, flexible scheduling, competitive salary, annual performance bonus, RSUs, and full benefits including medical, dental, vision, and 401k match
• Summer Fridays provide team members with half days to recharge
• Join one of our employee resource groups: Black, AAPI, LGBTQIA+, Women, Book Club, and Health & Wellness
• Comprehensive wellness, education, and employee assistance programs

Commitment to Diversity and Inclusion

At CMT, we believe the best ideas come from a mix of backgrounds and perspectives. We are an equal‑opportunity employer committed to creating a workplace and culture where everyone feels valued, respected, and empowered to bring their unique talents and perspectives. Diversity is essential to our success, and we actively seek candidates from all backgrounds to join our growing team. We do not discriminate based on race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status or disability state.

About Cambridge Mobile Telematics

Cambridge Mobile Telematics (CMT) is the world's largest telematics and AI company for safer mobility. Its mission is to make the world's roads and drivers safer. The company's AI‑driven platform, DriveWell Fusion®, proactively identifies and reduces driving risk, leading to fewer crashes and injuries. To date, CMT's technology has helped prevent over 126,000 crashes worldwide. CMT enables partners to measure risk, detect crashes, provide life‑saving assistance, and streamline claims. Headquartered in Cambridge, MA, CMT operates globally with offices in Budapest, Hungary; Chennai, India; Seattle, Washington; Tokyo, Japan; and Zagreb, Croatia. Learn more at www.cmt.ai.