Architect Product Security

Back Architect Product Security Jetblue Airways Corporation Salt Lake County, UT, United States 1 day ago Discuss this with your agent Open in Claude Open in ChatGPT Copy prompt Apply on the employer's site Prepare application Draft this with your agent Open in Claude Open in ChatGPT Copy prompt Role details Contract type Permanent contract Employment type Full-time (> 32 hours) Experience level Experienced Experience required 4 years minimum Compensation $150,400 Working hours Shift work Job source the employer's site Tech stack Application Programming Interfaces (APIs) Amazon Web Services Software System Penetration Testing Architectural Patterns User Authentication Microsoft Azure Cloud Computing Cloud Engineering Cyber Security Continuous Delivery Continuous Integration Distributed Systems +19 more Mobile Application Software Key Management Open Web Application Security Systems Development Life Cycle Cloud Services Zero Trust Network Access Secure Coding Software Engineering Web Platforms Google Cloud Software Security Kubernetes CIS Benchmarks Api Gateway GPT Serverless Computing Static Application Security Testing Microservices Dynamic Application Security Testing Job description The Architect, Product Security partners with product and engineering teams to design and deliver secure applications, APIs, and digital services. This role embeds security into product design and development by providing hands-on guidance, conducting threat modeling, and helping teams implement secure-by-design practices across the SDLC. The Architect operates as a hands-on security partner to product teams. The role focuses on secure-by-design principles, practical risk reduction, and enabling delivery teams to build resilient, scalable, and secure products without unnecessary friction., * Define and implement security architecture patterns for applications, APIs, cloud services, and platforms Develop secure design standards, reference architectures, and reusable patterns Ensure alignment with enterprise architecture and security strategy Embed security controls into Continuous Integration/Continuous Deployment pipelines and developer workflows Define and enforce secure coding practices and product security requirements Enable automation of security testing and validation (Static Application Security Testing, Dynamic Application Security Testing, Secure Code Analysis) Conduct and facilitate threat modeling sessions across product teams Identify architectural risks and define practical mitigation strategies Translate enterprise risk posture into product-level decisions and tradeoffs Define and guide application security testing strategies Partner with engineering teams to prioritize and remediate vulnerabilities Support penetration testing and security validation activities Architect controls for Authentication, Data protection and service security Support adoption of Zero Trust principles Partner with: Product Managers, Software Engineers, Platform and Cloud teams Other duties as assigned Requirements Security Architecture, Threat Modeling, Product Design, Application Programming Interface (API), Software Development Lifecycle (SDLC), Risk Management, Product Engineering, Security Design, Scalable System Development, Security Architecture, * Bachelor’s Degree in a relevant field; OR demonstrated capability to perform job responsibilities with a High School Diploma/GED and at least four (4) years of previous relevant work experience Four (4) years of experience in Application security, product security, or security architecture Experience designing and securing: Cloud-native and distributed systems, and APIs and microservices architectures Experience designing or securing modern applications, APIs, cloud services, distributed systems, or digital platforms Strong ability to operate in fast-paced product and engineering environments Ability to manage multiple priorities in a fast-paced, multi-team environment Available for occasional overnight travel (10%) Must pass a pre-employment drug test Must be legally eligible to work in the country in which the position is located Authorization to work in the US is required, this position is not eligible for visa sponsorship Preferred Experience and Qualifications Experience supporting customer-facing applications, digital platforms, mobile applications, ecommerce, loyalty, APIs, or cloud-native services. Experience in aviation, transportation, financial services, or another regulated or operationally complex environment. Familiarity with AWS, Azure, GCP, Kubernetes, containers, serverless platforms, API gateways, WAF technologies, secrets management, and CI/CD tooling. Experience with SAST, DAST, SCA, or application security posture management tools. Knowledge of OWASP Top 10, OWASP API Security Top 10, OWASP ASVS, NIST Cybersecurity Framework, NIST 800-53, NIST 800-63, CIS Benchmarks, ISO 27001, or similar frameworks. Experience contributing to secure design standards, architectu