VP of Product Security & Threat Modeling

Shain Associates; United States; On-site; USD 250,000 - 350,000; Full time

Job summary

Shain Associates seeks a highly technical and hands-on Security Guardian, Vice President, to lead security across engineering, platform, and business teams. This role sits in the first line of defense, designing and validating embedded security controls across cloud and distributed environments while reducing risk through active engagement with product teams.

The ideal candidate is an experienced security architect who translates complex concepts into actionable engineering decisions.

Qualifications

• Bachelor's degree in Computer Science or related field.
• CISSP, CISM, GIAC certifications preferred.
• 7+ years cybersecurity with focus in Product and Cloud security; fintech experience valued.

Responsibilities

• Conduct hands-on security assessments at application, platform, and system levels using threat modeling and vulnerability analysis.
• Design and embed security controls into architectures, including IAM, cryptography, network isolation, and secure defaults.
• Drive down security risk by engaging with engineering, validating controls in production against threat models.
• Partner with engineering as embedded product security expert to influence design and code paths for secure by default.
• Provide security guidance to senior leadership, translating tradeoffs into actionable mitigation strategies.
• Demonstrate deep expertise in three domains: product security, multi-cloud security, and software supply-chain security.
• Apply attacker-mindset to identify and remediate weaknesses before exploitation.
• Operate within agile DevSecOps, embedding security into CI/CD and automated testing.
• Communicate complex security topics clearly to engineers, architects, and executives.

Education

Bachelor's degree in Computer Science or related field

CISSP

CISM

GIAC

Job description

Shain Associates seeks a highly technical and hands-on Security Guardian, Vice President, to lead security across engineering, platform, and business teams. This role sits in the first line of defense, designing and validating embedded security controls across cloud and distributed environments while reducing risk through active engagement with product teams.

The ideal candidate is an experienced security architect who translates complex concepts into actionable engineering decisions.