Senior Product Security Architect

Jobtailor; Illinois; On-site; USD 140,000 - 200,000; Full time

Job summary

Jobtailor seeks a Senior Security Architect to lead architecture and engineering of security controls across software development environments, CI/CD pipelines, and cloud services. You will design secure release workflows and artifact management, partnering with security-by-design teams to operationalize requirements.

You will mentor engineers, drive secure engineering practices across global product environments, and ensure auditable evidence, SBOM generation, and release integrity.

Qualifications

• 7+ years in cybersecurity, product security, application security, software engineering, DevSecOps, cloud security, or related technical discipline.
• Hands-on experience securing software development environments, source code platforms, CI/CD pipelines, or software supply chains.
• Expert-level ability to design and operate security controls across cloud, SaaS, enterprise, and product engineering environments.
• Strong knowledge of software supply chain security, secrets management, artifact integrity, and secure release practices.
• Familiarity with OWASP Top 10, API security, and modern authentication/authorization models.
• Experience communicating risk and recommendations to engineering leadership and executives.
• Certifications such as CISSP, CSSLP, CCSP, or equivalent security credentials.

Responsibilities

• Lead architecture and engineering of security controls protecting source code repositories, development environments, build systems, software supply chains, and release processes.
• Design and implement secure CI/CD pipeline patterns, artifact management controls, signing services, and deployment workflows.
• Partner with security-by-design andAppSec teams to operationalize requirements, vulnerability management, threat modeling outcomes, and release controls.
• Establish secure application and API security standards and promote secure practices across engineering teams.
• Collaborate with engineering to reduce attack surfaces across applications, APIs, and cloud services.
• Drive modernization of development and engineering environments and integrate security across tools and platforms.
• Automate security controls and processes using APIs, IaC, and scripting; establish logging and detection requirements.

Education

Bachelor's degree in Computer Science, Information Systems, Cybersecurity, or related field

Tools

GitHub

GitLab

Azure DevOps

Bitbucket

Jenkins

GitHub Actions

Terraform

Open Policy Agent

Job description

Jobtailor seeks a Senior Security Architect to lead architecture and engineering of security controls across software development environments, CI/CD pipelines, and cloud services. You will design secure release workflows and artifact management, partnering with security-by-design teams to operationalize requirements.

You will mentor engineers, drive secure engineering practices across global product environments, and ensure auditable evidence, SBOM generation, and release integrity.