Product Security Architect

TP-Link Systems USA; Tustin (CA); On-site; USD 195,000 - 205,000; Full time

Benefits offered by this job

Salary Range: $195,000-$205,000

Fully paid medical, dental, and vision

401k contributions

PTO (over four weeks) per year

Bi-annual pay increases

Gym membership

Quarterly team-building events

Job summary

TP-Link Systems Inc. is seeking a Product Security Architect to lead product security across its networking and smart devices.

You will partner with R&D, product management, and manufacturing to ensure security is designed from concept through development and support. The role requires 10+ years in product security, experience with embedded systems, and the ability to translate security strategy into practical engineering requirements.

Qualifications

• 10+ years in product security, embedded systems security, or related field.
• Experience building and scaling product security programs for connected devices.
• Lead architect-level roles across multiple products or teams.
• Deep knowledge of embedded security, trust boundaries, provisioning, and secure updates.

Responsibilities

• Set security architecture strategy for TP-Link's connected-device products.
• Develop security requirements, architectures, and design patterns for engineering teams.
• Lead threat modeling and security reviews for major products and platforms.
• Guide security from design through end of life including manufacturing and provisioning.
• Provide direction on device identity, secure boot, roots of trust, and key management.

Skills

Product security

Embedded security

Security architecture

Threat modeling

PSIRT

Vulnerability investigations

Education

Bachelor's degree in Computer Science or related field

Master's degree in a relevant technical field

Tools

SAST

SCA

SBOM

Firmware analysis

Binary analysis

CI/CD tooling

Job description

About Us

Headquartered in the United States, TP-Link Systems Inc. is a global provider of reliable networking devices and smart home products, consistently ranked as the world’s top provider of Wi-Fi devices. The company is committed to delivering innovative products that enhance people’s lives through faster, more reliable connectivity. With a commitment to excellence, TP-Link serves customers in over 170 countries and continues to grow its global footprint. We believe technology changes the world for the better! At TP-Link Systems Inc, we are committed to crafting dependable, high-performance products to connect users worldwide with the wonders of technology. Embracing professionalism, innovation, excellence, and simplicity, we aim to assist our clients in achieving remarkable global performance and enable consumers to enjoy a seamless, effortless lifestyle.

Role Overview

TP-Link Systems Inc. is seeking a Product Security Architect to lead product security architecture across its networking, smart home, and connected-device portfolio. Reporting to the Senior Director of Product Security, the Product Security Architect is a senior technical leader responsible for advancing secure‑by‑design practices across TP‑Link's product lines. The role partners with R&D, product management, manufacturing, legal, and regulatory teams to ensure that security is designed into products from concept through development, manufacturing, release, and ongoing support, and that products continue to meet applicable industry standards and regulatory requirements throughout their supported life. The Product Security Architect translates TP‑Link's product security strategy into reusable security architectures, practical engineering requirements, and consistent design guidance for embedded, cloud, and mobile components, and provides technical leadership for architecture review, threat modeling, vulnerability response, and the integration of security tooling, automation, and AI‑assisted analysis into engineering workflows.

Key Duties and Responsibilities

• Set the security architecture strategy for TP-Link’s connected-device products.
• Develop security requirements, reference architectures, and design patterns that engineering teams can use.
• Lead threat modeling and security reviews for major products, platforms, and features.
• Guide security from first design through end of support, including manufacturing and device provisioning.
• Provide technical direction for device identity, secure boot, roots of trust, code signing, key management, and secure updates.
• Lead the integration of SAST, software composition analysis, SBOM generation, firmware analysis, and binary analysis into CI/CD pipelines and development workflows.
• Establish how tool findings, third‑party components, and software supply chain risk get tracked and fixed across products.
• Use AI and automation to make architecture reviews, code analysis, vulnerability investigation, and remediation faster and more consistent.
• Provide technical leadership for PSIRT and complex vulnerability investigations.
• Advise R&D, Product Management, Manufacturing, Legal, Regulatory, Communications, and company leadership on significant product security risks and decisions.
• Mentor security and engineering teams.
• Represent Product Security with customers, security researchers, certification bodies, and other external stakeholders when needed.

Requirements

• 10+ years in product security, embedded systems security, security architecture, secure product engineering, or a closely related technical field.
• Demonstrated experience building, scaling, or significantly improving a product security program for connected devices or other products where security is critical.
• Principal architect, technical lead, or comparable senior individual contributor experience spanning multiple products or engineering teams.
• Deep knowledge of embedded and connected-device security, especially trust boundaries, device identity, provisioning, applied cryptography, firmware integrity, and secure updates.
• Experience implementing SAST, SCA, or comparable tooling in a complex, multi‑product build environment.
• A strong record of leading PSIRT work, complex vulnerability investigations, coordinated disclosure, root cause analysis, and remediation across products or platforms.
• Able to turn regulatory and certification requirements into engineering controls and influence technical and business teams across a global organization.
• Familiarity with the EU Cyber Resilience Act, ETSI EN 303 645, UK PSTI, the U.S. Cyber Trust Mark, NIST IR 8259, and other related connected-product security requirements.

Preferred Qualifications

• Background in networking, telecommunications, consumer electronics, smart home products, or another industry where product security is not optional.
• Work involving secure manufacturing, device provisioning, firmware signing, key injection, or product supply chain security.
• Comfortable working with embedded Linux or RTOS products and complex firmware build environments.
• Stood up a product security tooling platform from scratch, including tool selection and rollout.
• Built or run AI‑assisted security tools or workflows in a product security setting.
• Product certification, conformity assessment, cybersecurity labeling, or regulatory readiness experience.
• Mandarin proficiency or experience working closely with engineering and manufacturing teams in China.

Education

Bachelor’s degree in Computer Science, Computer Engineering, Electrical Engineering, Cybersecurity, or a closely related technical discipline is required.

Master’s degree in a relevant technical field is a plus.

Benefits

• Salary Range: $195,000-$205,000
• Fully paid medical, dental, and vision insurance (partial coverage for dependents)
• Contributions to 401k funds
• Over four weeks of PTO per year
• Bi‑annual pay increases
• Health and wellness benefits, including free gym membership
• Quarterly team‑building events

At TP-Link Systems Inc., we are continually searching for ambitious individuals who are passionate about their work. We believe that diversity fuels innovation, collaboration, and drives our entrepreneurial spirit. As a global company, we highly value diverse perspectives and are committed to cultivating an environment where all voices are heard, respected, and valued.

We are dedicated to providing equal employment opportunities to all employees and applicants, and we prohibit discrimination and harassment of any kind based on race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state, or local laws.

Beyond compliance, we strive to create a supportive and growth‑oriented workplace for everyone.

Please, no third-party agency inquiries, and we are unable to offer visa sponsorships at this time.

TP-Link is a leading provider of consumer Wi‑Fi networking products. We continuously develop new products and technologies that transform the way people connect. Our networking expertise uniquely positions us as a leader in emerging technologies that improve our everyday lives, such as smart home products. Spacious and modern, our US offices create a casual atmosphere that fosters team collaboration. In addition to free snacks and drinks, TP-Link Systems Inc. offers a modern working environment, free gym membership, quarterly team building, flex-spending, employee paid benefits, bi‑annual raise opportunity, paid vacation & holidays, 401k plan and annual bonus opportunity. Come join our team!