Product Security Architect: Secure-by-Design (Hybrid)

JetBlue; New York (NY); Hybrid; USD 106,000 - 150,000; Full time

Benefits offered by this job

Hybrid work option

Flight benefits

Healthcare benefits

Job summary

JetBlue is seeking an Architect of Product Security to partner with product and engineering teams, embedding secure-by-design practices across the SDLC. You will conduct threat modeling, define secure architecture patterns, and drive secure coding standards to mitigate risk while enabling rapid delivery of secure applications and APIs.

You will lead security testing integration, guide product security requirements, and collaborate with cloud, platform, and software teams to ensure robust,

Qualifications

• Bachelor's degree or equivalent work experience in a relevant field.
• 4+ years in application security, product security, or security architecture.
• Experience securing cloud-native distributed systems, APIs, and microservices.
• Ability to operate in fast-paced product and engineering environments.
• OWASP/NIST awareness and secure development lifecycle experience.

Responsibilities

• Define security architecture patterns for applications, APIs, cloud services, and platforms.
• Develop secure design standards, reference architectures, and reusable patterns.
• Embed security controls into CI/CD pipelines and developer workflows.
• Lead threat modeling sessions across product teams and translate risk to design decisions.
• Partner with product managers and engineers to remediate vulnerabilities and validate security controls.

Skills

Threat modeling

Security architecture

Secure design patterns

Cross-team collaboration

Education

Bachelor's Degree in CS or related

Tools

AWS

Azure

GCP

Kubernetes

CI/CD tooling

SAST/DAST/SCA

Job description

JetBlue is seeking an Architect of Product Security to partner with product and engineering teams, embedding secure-by-design practices across the SDLC. You will conduct threat modeling, define secure architecture patterns, and drive secure coding standards to mitigate risk while enabling rapid delivery of secure applications and APIs.

You will lead security testing integration, guide product security requirements, and collaborate with cloud, platform, and software teams to ensure robust,