Senior Product Security Architect & Threat Modeling Lead

BETBY; United States; Teletrabalho; USD 150 000 - 190 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Health insurance

Relocation opportunities

Remote talent across globe

Paid time off

Professional development

Language learning support

Modern hardware provided

Resumo da oferta

BETBY is seeking a Senior Product Security Engineer to join the Application Security & Incident Response team. This architect-level role serves as the security design authority for product, engineering, and business systems, ensuring secure design across external and internal products.

You will own the threat modelling process, embed security review into product delivery, and act as security approver for changes with significant risk.

Qualificações

• At least 5 years of experience in product security, application security or security architecture, including at least 3 years of hands-on threat modelling and/or security design review.

Responsabilidades

• Own the security review process from intake to sign-off, including risk-based triage and review triggers for high-risk changes.
• Embed security review into product delivery without slowing it down, and report on review coverage and flow metrics.
• Act as the security approver for in-scope changes, with the authority to block releases when residual risk is unacceptable and requires immediate escalation.
• Weigh security risk against business needs, propose workable alternatives, and document exceptions and risk acceptance decisions.
• Facilitate threat modelling for features, services, integrations and architectural changes.
• Maintain threat models for the platform's critical flows and a reusable threat library.
• Review technical designs, API contracts and integrations, and develop security requirements and acceptance criteria.
• Develop secure architecture patterns and define target-state designs and compensating controls for legacy constraints.
• Maintain security capabilities, map it against threat models, and drive closure of identified gaps.
• Perform technical security assessments of vendors, providers and integrations, and define technical security requirements for them.
• Support the technical security side of operator onboarding and integration.
• Document identified risks and track them to remediation or formal acceptance in coordination with GRC.
• Contribute design-level root cause analysis and preventive controls to post-incident reviews.
• Support technical leads in owning threat mitigation for their solutions, and provide self-service guidance for low-risk changes.
• Report regularly on product security posture, release decisions and open risks.

Conhecimentos

Threat Modeling

Security Architecture

Threat Assessment

Risk Management

Cloud Security

Descrição da oferta de emprego

BETBY is seeking a Senior Product Security Engineer to join the Application Security & Incident Response team. This architect-level role serves as the security design authority for product, engineering, and business systems, ensuring secure design across external and internal products.

You will own the threat modelling process, embed security review into product delivery, and act as security approver for changes with significant risk.