Product Security Leader: Threat Modeling & Secure DevOps

Flagstar Bank; New York (NY); On-site; USD 159,075 - 242,112; Full time

Benefits offered by this job

Benefits package

Job summary

Flagstar Bank is seeking a Product Security Principal in New York, NY 10018. You will serve as the embedded security SME for assigned product lines, driving a security-first culture and aligning with BURM to ensure secure design through deployment.

You will lead threat modeling, security architecture reviews, secure coding practices, and security testing coordination while addressing evolving risk across the product’s technology supply chain.

Qualifications

• Education level preferred: High School / GED / Foreign Equivalent.
• Minimum experience: 8+ years in information security, cybersecurity, or tech risk management.
• Experience in 3 Lines of Defense (3LoD) model and translating policy into control designs.
• Proven ability to communicate with technical and non-technical stakeholders.

Responsibilities

• Embed threat modeling and secure coding practices across product teams.
• Own security requirements, threat modeling, and data-handling standards with Tech Leads.
• Lead security testing, vulnerability assessments, and remediation tracking.

Skills

App security

Threat modeling

SSDLC

Cloud security

DevSecOps

Security testing

Risk management

Stakeholder comms

Regulatory compliance

Education

High School / GED

Undergraduate degree

Tools

Azure

AWS

IAM

Secrets Management

DevSecOps tooling

CI/CD security tooling

Job description

Flagstar Bank is seeking a Product Security Principal in New York, NY 10018. You will serve as the embedded security SME for assigned product lines, driving a security-first culture and aligning with BURM to ensure secure design through deployment.

You will lead threat modeling, security architecture reviews, secure coding practices, and security testing coordination while addressing evolving risk across the product’s technology supply chain.