Senior Product Security Architect & Threat Modelling Lead

BETBY; United States; Remote; USD 140,000 - 210,000; Full time

Benefits offered by this job

Health insurance

Paid sick leave

Vacation days

Professional development

Language learning support

Modern hardware

International team

Team events

Welfare support

Job summary

BETBY is seeking a Senior Product Security Engineer to lead security design and risk assessments for our products and services. You will own the security review flow, coordinate with DevSecOps, and set risk-based release controls to protect critical systems.

You will drive threat modelling sessions, define secure patterns for distributed architectures, and collaborate with stakeholders across product, engineering and GRC to ensure robust security postures.

Qualifications

• 5+ years in product security, application security or security architecture.
• Hands-on threat modelling experience (STRIDE/PASTA or similar).
• Experience making go/no-go release decisions with concrete risk justifications.
• Secure architecture design for distributed systems (microservices, API gateways, multi-tenant).
• Knowledge of authentication/authorization (JWT, OAuth2/OIDC, mTLS).

Responsibilities

• Own the security review flow from intake to sign-off, including risk triage for high-risk changes.
• Act as security release authority to block releases when residual risk is unacceptable.
• Facilitate threat modelling for features and architectural changes; maintain threat libraries.
• Review designs, API contracts, and define security requirements and acceptance criteria.
• Develop secure architecture patterns and compensating controls for legacy constraints.
• Maintain security capabilities and drive closure of identified gaps.
• Perform vendor and integration security assessments; define security requirements for them.
• Document risks and track remediation with GRC coordination.
• Contribute to post-incident analyses with design-level root-cause analysis.

Skills

Threat modelling

Security architecture

OAuth2/OIDC

JWT/JWS

Scripting (Python)

Threat risk decisions

Risk & GRC

Stakeholder negotiation

Tools

Cloud security

Kubernetes

Job description

BETBY is seeking a Senior Product Security Engineer to lead security design and risk assessments for our products and services. You will own the security review flow, coordinate with DevSecOps, and set risk-based release controls to protect critical systems.

You will drive threat modelling sessions, define secure patterns for distributed architectures, and collaborate with stakeholders across product, engineering and GRC to ensure robust security postures.