Product Security Lead - DevSecOps & Cloud Risk Champion

Mizuho Financial Group Inc.; New York (NY); Hybrid; USD 150,000 - 215,000; Full time

Benefits offered by this job

generous employee benefits package

discretionary bonus

competitive total rewards package

Job summary

Mizuho Financial Group, Inc. is seeking a seasoned product security leader to embed security across the development lifecycle, SAST/DAST workflows, and cloud security practices. You will partner with engineering, platform, and data teams to deliver secure solutions for financial services.

The role emphasizes secure AI risk management, threat modeling, and establishing a culture of security ownership across product teams. NYC hybrid work arrangement is offered.

Qualifications

• Extensive experience in product, application, or software security within financial services.
• Deep expertise in secure development, DevSecOps, threat modeling, and design risk assessment.
• Hands-on experience with application security tooling, including SAST, DAST, and software composition analysis.
• Strong knowledge and hands-on experience of data security, cloud security (IaaS/PaaS/SaaS), and emerging secure AI practices.
• Exceptional stakeholder engagement, communication, and influencing skills.

Responsibilities

• Secure Development & DevSecOps: embed security into lifecycles and CI/CD pipelines.
• Application Security Services: deliver SAST/DAST and risk triage.
• Data, Cloud & Secure AI Adoption: advise on cloud security and secure AI risks.
• Leadership & Collaboration: lead product security and align security with delivery.

Skills

Secure development

DevSecOps

Threat modeling

Design risk assessment

Application security tooling

SAST

DAST

Software composition analysis

Data security

Cloud security

Secure AI practices

Stakeholder engagement

Tools

SAST

DAST

Software composition analysis

Job description

Mizuho Financial Group, Inc. is seeking a seasoned product security leader to embed security across the development lifecycle, SAST/DAST workflows, and cloud security practices. You will partner with engineering, platform, and data teams to deliver secure solutions for financial services.

The role emphasizes secure AI risk management, threat modeling, and establishing a culture of security ownership across product teams. NYC hybrid work arrangement is offered.