Product Security Lead - Cloud, Data & AI Security | Global Banking and Markets Group

Techfellow Limited; New York (NY); Hybrid; USD 180,000 - 275,000; Full time

Job summary

Techfellow Limited is seeking a senior product security leader to shape standards across application, data, cloud and AI security. This hands-on role combines leadership with technical depth to influence engineering teams while staying close to delivery details.

You will lead secure-by-design adoption, embed threat modelling, drive DevSecOps maturity, and own SAST, DAST and SCA programs at scale, partnering with engineering to reduce vulnerabilities without slowing delivery.

Qualifications

• 8+ years in product security or software security, ideally within financial services.
• Hands-on expertise in secure SDLC, DevSecOps, threat modelling and risk assessment.
• Proven experience delivering SAST, DAST and SCA programmes at scale.
• Strong cloud security knowledge across IaaS, PaaS and SaaS, including Azure.
• Practical understanding of data security controls, involvement with DSPM, classification and protection workflows.
• Secure AI governance, model risk and AI application security exposure.
• Ability to work credibly with engineering, platform, data, cloud and senior security stakeholders.
• Track record as a player-coach security leader who can set direction while delivering.

Responsibilities

• Lead product security across application, data, cloud and AI-enabled technology environments.
• Embed secure design, threat modelling and risk assessment into software and data delivery lifecycles.
• Drive DevSecOps maturity through automated controls, CI/CD security testing and practical developer guardrails.
• Own application security services across SAST, DAST, SCA, findings triage and remediation prioritisation.
• Partner with engineering teams to improve secure coding standards, developer education and vulnerability reduction.
• Support data security initiatives across classification, protection, access controls and lifecycle risk.
• Advise on secure configuration and control design across IaaS, PaaS and SaaS environments.
• Help define secure AI adoption practices covering application, model, data and governance risks.
• Lead, coach and develop a product security practice with strong business and engineering alignment.

Skills

Secure SDLC

DevSecOps

Threat modelling

SAST

DAST

SCA

Cloud security

Azure

CSPM

SSPM

Data security

DSPM

AI governance

Model risk

Communication

Leadership

Influencing

Job description

[Up to c. $275k Comp Package | Hybrid Working]

Role Overview

A leading global financial institution is building out a senior product security capability across application, data, cloud and emerging AI security. This is a hands‑on leadership role for someone who can shape standards, influence engineering teams and still get close to the technical detail. You’ll lead secure-by-design adoption across software delivery, cloud platforms and data-driven products, helping teams reduce risk early without slowing delivery...

Key Responsibilities

• Lead product security across application, data, cloud and AI-enabled technology environments
• Embed secure design, threat modelling and risk assessment into software and data delivery lifecycles
• Drive DevSecOps maturity through automated controls, CI/CD security testing and practical developer guardrails
• Own application security services across SAST, DAST, SCA, findings triage and remediation prioritisation
• Partner with engineering teams to improve secure coding standards, developer education and vulnerability reduction
• Support data security initiatives across classification, protection, access controls and lifecycle risk
• Advise on secure configuration and control design across IaaS, PaaS and SaaS environments
• Help define secure AI adoption practices covering application, model, data and governance risks
• Lead, coach and develop a product security practice with strong business and engineering alignment

What You’ll Bring…

• 8+ years across product security, application security or software security engineering, ideally within financial services or capital markets
• Hands‑on expertise across secure SDLC, DevSecOps, threat modelling and technical design risk assessment
• Proven experience delivering SAST, DAST and software composition analysis programmes at scale
• Strong cloud security knowledge across IaaS, PaaS and SaaS, ideally including Azure, CSPM and SSPM
• Practical understanding of data security controls, ideally including DSPM, data classification and protection workflows
• Secure AI, AI governance, model-risk or AI application security exposure
• Ability to work credibly with engineering, platform, data, cloud and senior security stakeholders
• Track record as a player-coach security leader who can set direction and remain technically close to delivery
• Strong communication, prioritisation and influencing skills in a complex enterprise environment
• (Preferred) Exposure to cloud-native security, container security, API security or software supply-chain security
• (Preferred) Security certifications such as CISSP, CSSLP, CCSP, OSWE, GWAPT or cloud security equivalents