Senior Product Security Engineer

Guidewire Software; Houston (TX); On-site; USD 120,000 - 150,000; Full time

Job summary

A leading software company in Houston is seeking a Senior Product Security Engineer to shape the security architecture of their SaaS platforms. The ideal candidate will drive initiatives that reduce systemic risks, lead secure design reviews, and produce comprehensive security documentation. Candidates should have deep expertise in SaaS security, strong communication skills, and a collaborative mindset. This role offers a dynamic and impactful opportunity to influence product security from inception through delivery.

Qualifications

• Deep expertise in SaaS product security.
• Ability to make principled trade-offs in ambiguous situations.
• Mastery of structured threat modeling and risk analysis.
• Ability to communicate complex security concepts.
• Track record of building trusted relationships.

Responsibilities

• Own the evolution and governance of product security architecture.
• Lead secure design reviews and threat modeling sessions.
• Identify architectural risk patterns and remediate them.
• Influence product direction through technical credibility.
• Produce documentation that scales security knowledge.

Skills

SaaS product security

IAM

cloud/container security (AWS/Kubernetes)

API security

zero-trust architectures

strong communication

collaborative mindset

mentoring

growth mindset

Education

Technical certifications (e.g., OSWE, OSCP, AWS Security)

Job description

Summary

Join Guidewire as a Senior Product Security Engineer and be a key technical expert responsible for shaping the security architecture of our industry‑leading SaaS platforms. At Guidewire, security is not a checkbox—it is a foundational pillar of the trust we build with over 540+ global insurers.

About the Role

In this role, you will go beyond transactional engagements and drive systemic change. You will act as a senior technical partner to our engineering and product teams, ensuring that security is embedded early and consistently into our CI/CD pipelines, cloud environments, and core product architectures. Success in this role is measured by the durability of the secure outcomes you create, the impact to technical and cultural transformations, and the trust you build with stakeholders across the organization.

What You’ll Do

• Technical accountability and owning relationships: Own the evolution and governance of product security architecture for specific services within our SaaS platform. You will drive multi‑quarter initiatives that measurably reduce systemic risk while aligning security investments with business growth.
• Execution & Secure Delivery: Lead secure design reviews, threat modeling, and architecture assessments for critical features. You will partner directly with engineering teams to integrate robust security controls into distributed systems, APIs, and containerized environments.
• Systemic Risk Management: Identify recurring architectural risk patterns and lead efforts to remediate them at scale. You will provide leadership during security incidents and post‑incident reviews, driving the long‑term corrective actions that improve our resilience.
• Cross‑Functional Influence: Influence product direction without formal authority through technical credibility and sound judgment. You will frame security discussions in terms of business and customer impact, enabling informed decision‑making rather than reactive risk avoidance.
• Knowledge Sharing & Documentation: Produce durable documentation—including architecture guidance, threat models, and decision records—that scales security knowledge across the organization.

What You’ll Bring

• Technical Depth: Deep expertise in SaaS product security, including IAM, authentication/authorization protocols, data protection, cloud/container security (AWS/Kubernetes), API security and zero‑trust architectures.
• Architectural Judgment: A proven ability to make principled trade‑offs in ambiguous situations, balancing security rigor with development velocity.
• Threat Modeling Excellence: Mastery of structured threat modeling and risk analysis for complex, cloud‑based systems.
• Strong communication: Proven ability to communicate complex security concepts and adapt communication styles to both technical and non‑technical audiences.
• Collaborative Mindset: A track record of building trusted relationships with Product Management, Engineering, SRE, and Compliance teams.
• Raising the Bar: Passion for mentoring peers and stakeholders to strengthen security intuition across the company. You model high expectations for quality, accountability, and technical excellence.
• Growth Mindset: A strong desire to constantly learn new things, approach problems with a growth mindset, and have a passion for solving problems through people, process and technology.
• Credentials: Technical certifications such as OSWE, OSCP, AWS Security, etc., are preferred; an equivalent experience and demonstrable knowledge is required.

Your Impact

In your first 6 months: you will establish yourself as a trusted partner to key product teams, lead architecture reviews for upcoming platform launches, and begin identifying systemic risk patterns for remediation.

Over time: your work will result in a demonstrable reduction in product risk. You will have established shared standards and reference designs that allow Guidewire to ship safely and predictably at scale, influencing the long‑term technology roadmap for the world’s leading P&C insurance platform.

About Guidewire

Guidewire is the platform P&C insurers trust to engage, innovate, and grow efficiently. We combine digital, core, analytics, and AI to deliver our platform as a cloud service. More than 540+ insurers in 40 countries, from new ventures to the largest and most complex in the world, run on Guidewire.

As a partner to our customers, we continually evolve to enable their success. We are proud of our unparalleled implementation track record with 1600+ successful projects, supported by the largest R&D team and partner ecosystem in the industry. Our Marketplace provides hundreds of applications that accelerate integration, localization, and innovation.

For more information, please visit www.guidewire.com and follow us on Twitter: @Guidewire_PandC.

Equal Opportunity Statement

Guidewire Software, Inc. is proud to be an equal opportunity and affirmative action employer. We are committed to an inclusive workplace, and believe that a diversity of perspectives, abilities, and cultures is a key to our success. Qualified applicants will receive consideration without regard to race, color, ancestry, religion, sex, national origin, citizenship, marital status, age, sexual orientation, gender identity, gender expression, veteran status, or disability. All offers are contingent upon passing a criminal history and other background checks where it's applicable to the position.