Senior Product Security Architect & AI Security Leader

CBIZ; Independence Township (OH); On-site; USD 140,000 - 190,000; Full time

Job summary

CBIZ is hiring a Senior Product Security Engineer to lead the product security program across the enterprise. This hands-on architect role defines strategy, builds the program from the ground up, and acts as a trusted advisor to development, AI, and platform teams.

The role champions secure-by-design in the SDLC, drives a mature DevSecOps transition, and guides secure coding, threat modeling and supply chain integrity. Strong coding skills and AI security expertise are essential.

Qualifications

• 8+ years of software engineering or related field with 4+ years in product security.
• Hands-on coding in Python, Java, C#/.NET, JavaScript/TypeScript, or Go.
• Experience with AI security in matrix orgs and AI/ML integration.
• Familiar with OWASP Top 10 for LLMs, MITRE ATLAS, and NIST AI RMF.
• Deep Secure SDLC, OWASP Top 10, CWE Top 25, MITRE ATT&CK, CVSS.

Responsibilities

• Define and own enterprise Product Security strategy, roadmap and reference architectures.
• Lead Secure SDLC and DevSecOps with security gates across all phases.
• Partner with AI engineering to secure AI/ML deployments and models.
• Conduct threat modeling and architecture reviews for AI/ML systems.
• Oversee vulnerability management, SLAs and remediation metrics.
• Define and enforce software supply chain controls and SBOM practices.
• Lead security mindset advocacy and developer enablement programs.

Skills

Software engineering

Product security

DevSecOps

Threat modeling

AI security

Security architecture

Education

College degree or equivalent

Tools

Semgrep

CodeQL

SonarQube

Burp Suite

OWASP ZAP

Snyk

Black Duck

IaC scanning

Secrets detection

GitHub Actions

GitLab CI

Azure DevOps

Jenkins

Job description

CBIZ is hiring a Senior Product Security Engineer to lead the product security program across the enterprise. This hands-on architect role defines strategy, builds the program from the ground up, and acts as a trusted advisor to development, AI, and platform teams.

The role champions secure-by-design in the SDLC, drives a mature DevSecOps transition, and guides secure coding, threat modeling and supply chain integrity. Strong coding skills and AI security expertise are essential.