Product Security and Privacy Architect

ASSA ABLOY Opening Solutions

. Leading day-to-day security/privacy architecture governance .

Posted 4/30/2026full-timeRemote • 🇺🇸 United StatesSeniorLead💰 $140,000 - $160,000 per yearWebsite

Tech Stack

Tools & technologies

Cloud

About the role

Key responsibilities & impact

Leading day-to-day security/privacy architecture governance
Defining corporate wide security and privacy requirements, controls, and standards
Defining corporate wide Secure Coding, third-party, deployment policies & other architecture-related standards
Defining required training content
Defining paved roads/security and privacy-by-design patterns and libraries
Leading development of AI-enabled PSP Architecture capabilities
Owning the threat modeling framework and quality bars
Running/approving security & privacy architecture reviews
Leading audit/assessment planning, evidence of expectations, and defensibility
Being responsible for tooling selection and integration related to security & privacy architecture domain
Architecting compliance, analyzing new regulations and standards to identify gaps in the platform's capabilities, standards, and controls
Assessing New Acquisitions Architecture and contributing to due diligence on a needed basis
Providing recommendations for risk acceptance and exception requests
Providing input on tooling strategy and integration guidance for non-architecture related domains
Providing guidance on security requirements for supply chain tooling, pipeline architecture, and associated standards
Validating that platform architecture enables enforcement of PSP security controls
Providing expert input on exploitability, attack paths, and mitigation options during Incident handling process
Providing guidance on true risk vs noise for security tool outputs and penetration tests.

Requirements

What you’ll need

Master's Degree in computer science or similar qualifications
At least 3 years in software/product security, application security, or security architecture
At least 7 years of hands-on software engineering / QA / DevOps earlier in career
At least one security or privacy certification (CISSP, CIPT, CSSLP, CEH, ...) is a plus
Proven ownership of at least one of: threat modeling program, secure design review governance, audit evidence management, security tooling strategy, penetration testing program or similar
Experience contributing to at least one Secure Software Development Lifecycle (SSDL) program
Working knowledge of general principles of application security
Working knowledge of threat modeling principles
Working Knowledge of security standards (OWASP, ISO, NIST, ...)
Knowledge of security regulations, such as the Radio Equipment Directive (RED), Cyber Resilience Act (CRA), Federal Information Processing Standards (FIPS), and Common Criteria (CC) or equivalent
Good understanding of cryptographic principles, including algorithms, key management, and protocols
Experience using security tools (SAST, DAST, SCA, Vulnerability Scanners, Secret Scanners)
Hands-on experience in at least one, preferably more, of these application domains: Embedded device Security, Mobile security, Web & API security, Desktop security
Experience with Agile/SAFe Methodology is preferred
Experience with usage of AI tools in the context of a security program is preferred
Cloud infrastructure, Supply Chain, and deployment Security is preferred.

Benefits

Comp & perks

Competitive salary and rewards package
Competitive benefits and annual leave offering
A vibrant, welcoming & inclusive culture
Extensive career development opportunities and resources

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

security architecturesecure codingthreat modelingpenetration testingapplication securitysecure software development lifecyclecryptographic principlessecurity standardssecurity toolscloud infrastructure

Soft Skills

leadershipcommunicationorganizational skillsrisk assessmentguidancerecommendationaudit planningintegration strategydefensibilitycollaboration

Certifications

CISSPCIPTCSSLPCEH