VP Security Guardian, Product Security

Jobtailor; Massachusetts; On-site; USD 140,000 - 190,000; Full time

Job summary

Jobtailor in Massachusetts seeks a senior Product Security expert to lead security across product and cloud platforms. You will perform threat modeling, architecture reviews, and secure designs embedded in systems and applications.

Collaborate with engineering to drive secure-by-default practices, validate controls in production, and translate security tradeoffs for executives. The role requires 7+ years in cybersecurity with emphasis on product and cloud security and relevant certifications.

Qualifications

• 7+ years of progressive cybersecurity experience with focus in Product and Cloud security
• 3+ years within financial services
• Bachelor’s degree in computer science or related technical field
• Certifications such as CISSP, CISM, GIAC preferred
• AWS or Azure Cloud Security certification highly valued

Responsibilities

• Conduct firsthand security assessments at application, platform, and system levels using threat modeling, architecture review, and vulnerability analysis
• Design and recommend concrete security controls embedded into system and application architectures
• Own and drive down technical security risk by engaging with engineering and platform teams and validating controls in production
• Partner with engineering teams as an embedded product security expert to influence design decisions
• Provide technically grounded security guidance to senior leadership and translate security tradeoffs into actionable decisions
• Demonstrate deep expertise in advanced security domains (product security, multi-cloud security, threat modeling, secure design)
• Bring strong depth across network security, product/platform security, data protection, cryptography, and secure software delivery practices
• Work within agile environments embedding security into DevSecOps, automated testing, and secure CI/CD pipelines
• Communicate security risks, design tradeoffs, and remediation strategies clearly to engineers, architects, and executives

Skills

Product security

Cloud security

Financial services

Education

Bachelor’s degree in computer science

Job description

Responsibilities

• Conduct firsthand security assessments at the application, platform, and system levels using threat modeling, architecture review, and vulnerability analysis to identify design flaws, cloud misconfigurations, insecure dependencies, and agent or API abuse scenarios.
• Design and recommend concrete security controls that are embedded directly into system and application architectures, including secure identity and access design, cryptographic protections, network isolation, runtime enforcement, and secure defaults across cloud and distributed environments.
• Own and actively drive down technical security risk by continuously engaging with engineering and platform teams, validating that security controls are correctly implemented, effective in production, and aligned with real‑world threat models rather than static risk registers.
• Partner closely with engineering teams as an embedded product security expert, influencing design decisions early, reviewing architecture and code paths, and helping teams build secure systems by default rather than retrofitting controls.
• Provide technically grounded security guidance to senior leadership, translating complex security tradeoffs into clear engineering decisions and recommending concrete mitigation strategies based on architecture, cloud primitives, cryptographic design, and secure software delivery practices.
• Demonstrate deep, hands‑on expertise in at least three advanced security domains, such as product security, multi‑cloud security, threat modeling, secure architecture and design, Agentic AI security, blockchain and cryptographic systems, and software supply‑chain security.
• Bring strong technical depth across network security, product and platform security, data protection and cryptography, and offensive security techniques, using attacker‑mindset analysis to proactively identify and remediate weaknesses before exploitation.
• Operate effectively within agile engineering environments, embedding security into iterative delivery through DevSecOps and Shift‑Left principles, automated security testing, secure CI/CD pipelines, and rapid, evidence‑based decision‑making.
• Demonstrate strong written and oral communication skills, effectively engaging with engineers, architects, and platform teams on deep technical security topics while clearly articulating security risks, design tradeoffs, and remediation strategies to business and executive stakeholders in a concise, actionable manner.

Requirements

• At least 7+ years of progressive cybersecurity experience with focus in Product and Cloud security and 3+ years within financial services.
• Bachelor’s degree in computer science or related technical field.
• Professional certifications such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), and GIAC are preferred.
• AWS or Azure Cloud Security certification is highly valued.
• Proven experience collaborating with engineering teams in an embedded security engagement model.