Product Security Engineering Director

Envestnet; United States; Hybrid; USD 184,000 - 230,000; Full time

Benefits offered by this job

Medical insurance

Paid time off

401k company match

Paid parental leave

Education reimbursement

Disability coverage

Mental health & wellness support

Job summary

Envestnet's Product Security Engineering team embeds security into its wealth management platforms from the start, partnering with product managers, engineers, and cybersecurity teams to design secure, resilient products. The role focuses on threat modeling, secure design, and risk-based remediation across APIs, cloud services, and AI-enabled features.

The position offers a hybrid East Coast workflow with strong growth opportunities, competitive compensation, and comprehensive benefits as part

Qualifications

• Bachelor’s or Master’s in Computer Science, Cybersecurity, or related field.
• Strong experience in product or application security architecture, especially in financial services.
• Hands-on threat modeling, security architecture reviews, and secure system design including AI-enabled systems.
• Solid understanding of modern application architectures, including microservices, APIs, and cloud-native platforms.
• Knowledge of identity and access management, encryption standards, and secure integration patterns.

Responsibilities

• Embed strong security practices into design, development and operation of Envestnet platforms.
• Perform threat modeling, security reviews, and remediation for applications, APIs and cloud services.
• Define secure development requirements and security review criteria aligned with SDLC.
• Mentor engineers through technical guidance and reviews.
• Participate in audits, assessments and compliance activities with detailed technical input.

Skills

Threat modeling

Security architecture

Secure design

APIs

Cloud-native

AI/LLM security

Education

Bachelor’s/Master’s in Computer Science or Cybersecurity

Job description

Description

The application window will close November 1st, 2026.

Job Location

The primary work location for this role is East Coast with a remote work model.

About Envestnet

Envestnet is an adaptiveWealthTechcompany that isredefining the future of wealth management byhelpingadvisors meet the moment with its comprehensive technology, actionable insights, and industry leading support.Backed byover25 years of experience and approximately$7.0 trillionin platform assets, Envestnet is trusted by over one third of financial advisors across leading banks, wealth managers, brokerages, and RIAs.

For a deeper look at how Envestnet is shaping the future of financial advice, visit www.envestnet.com.

The Team You’ll Join

The Product Security Engineering team plays a critical role in embedding security into Envestnet’s products and platforms from the very beginning of the development lifecycle. Working closely with product managers, architects, engineers, and cybersecurity teams, they help design secure, resilient solutions through architecture reviews, threat modeling, and security-by-design practices. The team supports modern applications, APIs, distributed systems, and emerging AI-powered capabilities, helping identify risks early and guide secure innovation. What makes this team especially exciting is its forward-looking focus on securing next-generation technologies, including AI and LLM-based solutions, while influencing key product decisions that strengthen the security and trustworthiness of the platforms our clients rely on every day.

How You’ll Contribute

Responsible for embedding strong security practices into the design, development and operation of Envestnet financial technology platforms. Partners with product management, software engineering, architecture and infrastructure teams to identify and mitigate security risks early in the product lifecycle. Defines secure design standards, performs threat modeling and security reviews and helps teams remediate vulnerabilities in applications, APIs and cloud services.

• Acts as a technical expert in product and application security, supporting multiple product lines or platforms.
• Leads threat modeling, secure design reviews and architecture assessments for complex applications, APIs and cloud-native services.
• Partners with engineering and product teams to identify security risks early and recommend practical, scalable mitigations.
• Define secure development requirements, architecture standards, and security review criteria aligned with the Secure Development Lifecycle (SDLC).
• Performs and oversees application security testing, vulnerability analysis and remediation validation.
• Helps prioritize security findings based on risk, business impact and regulatory requirements.
• Review significant security incidents to identify architectural weaknesses, systemic control gaps, and long-term remediation opportunities.
• Defines and promotes secure-by-design patterns for modern applications, APIs, distributed systems, and AI-enabled solutions, including LLM-based capabilities.
• Mentors product security engineers through technical guidance and reviews.
• Participates in audits, assessments and compliance activities by providing detailed technical input and documentation.
• Establishes product security requirements related to encryption, identity, authentication, authorization, secrets management, and secure configuration, while ensuring alignment with industry standards and regulatory requirements.
• Assess and govern the security of Generative and Agentic AI architectures, including LLMs, RAG, AI agents, MCP integrations, orchestration frameworks, and third-party AI services through architecture reviews and threat modeling.
• Define AI security standards, guardrails, and secure-by-design patterns, and provide strategic guidance for secure adoption of AI-enabled products and AI-assisted development capabilities.
• Identify and address cross-product security risks by driving reusable security patterns, reference architectures, and strategic security improvements, while influencing product roadmaps, architecture decisions, and technology strategy through security-focused design guidance and risk assessments.

What You’ll Need to Bring

• Candidates should demonstrate the relevant experience, skills, and capabilities needed to successfully perform in the role. Relevant experience may be gained through current responsibilities, prior roles, project work, leadership opportunities, or other comparable experiences.
• Bachelor’s/Master’s in Computer Science, Cybersecurity, or related field.
• Strong experience in product or application security architecture, with a focus on design-level security preferably in a financial services industry.
• Hands-on experience with threat modeling, security architecture reviews, and secure system design including AI-enabled systems.
• Solid understanding of modern application architectures, including microservices, APIs, and cloud-native platforms.
• Working knowledge of AI/LLM concepts, including model integration patterns, RAG architectures, and agentic workflows.
• Knowledge of identity and access management, encryption standards, and secure integration patterns.

Nice-to-Have

• Familiarity with industry frameworks such as OWASP, NIST, and security requirements for regulated environments including emerging AI governance practices.
• Certifications (optional): CISSP, CSSLP, CCSP.
• Strong communication skills to influence design decisions without direct ownership of delivery teams.
• Ability to translate security risks into clear architectural guidance for product and engineering teams.

Why You’ll Enjoy Working at Envestnet

Help shape the future of WealthTech. At Envestnet you’ll gain hands-on experience and collaborate with some of the industry’s brightest minds to deliver meaningful, innovative solutions that make a real difference.

We value flexibility in how and where work gets done, and we recognize strong performance with meaningful rewards- because your contributions should drive both business success and your own personal growth. If you’re looking for a place where your work has impact, your development is supported, and your contributions are truly valued, Envestnet is where you can build your future.

The opportunity is now!

Sponsorship

This position is not open to candidates requiring visa sponsorship

Our Investment in You

This role offers a base salary range of $184,200.00 to $230,300. The range listed represents a good-faith estimate of base salary compensation for this position and does not include incentive compensation, equity or benefits. Individual pay will be determined based on factors including, but not limited to, relevant experience, skills, education, certifications, and geographic location, in accordance with applicable pay transparency laws. This role is eligible for an additional incentive component as part of the total rewards package.

• medical insurance
• paid time off (PTO)
• 401k company match
• paid parental leave
• education reimbursement
• disability coverage
• mental health & wellness support

Our Commitment to Inclusion & Belonging

Envestnet is an Equal Opportunity Employer and is committed to creating an inclusive environment for all employees and applicants. We welcome and value individuals of all backgrounds and do not discriminate based on race, color, religion, creed, sex (including pregnancy or related medical conditions), gender identity or expression, sexual orientation, national origin, ancestry, age, disability, genetic information, military or veteran status, citizenship status, or any other status protected by applicable law. We encourage individuals from all backgrounds to apply.

We strive to provide an inclusive application and interview process. If you are a candidate with a disability and require reasonable accommodation, please contact us at [e-mail]. Please include your full name, the title of the role you are applying for, and the accommodation necessary to assist you with the recruiting process.