Principal Software Security Architect

Overview

Principal Software Security Architect who owns security architecture for BeyondTrust's product suite end to end, embedded within Engineering and Architecture teams in the Office of the CTO, designing security into products from first principles through to production.

What you'll do

• Own end-to-end security architecture for assigned product lines, from concept through production, defining target-state architecture and secure-by-default patterns.
• Lead threat modeling, attack surface analysis, and secure design reviews across products, platform services, endpoint agents, and cloud-native systems, driving architectural decisions that eliminate unnecessary exposure.
• Use LLM platforms (Claude, OpenAI) as core tools to scale threat analysis, abuse-case generation, architecture review, and remediation guidance, building prompts, plugins, skills, and agent workflows.
• Embed secure-by-default patterns into product development, contributing reference architectures, reusable components, and automated guardrails, and building self-service security capabilities.
• Own and expand the Product Security handbook, a living system that feeds the team's AI workflows to enforce secure design standards and engineering best practices.
• Set technical direction for secure design across the org as a principal-level engineer, mentoring engineers, architects, and Security Champions on secure design, attack surface reduction, and AI-first security workflows.
• Help evolve BeyondTrust's AI-first Product Security Architecture strategy, identifying where AI workflows can replace manual processes, where they need human oversight, and where capability gaps exist.

What you'll need

• 10+ years in Software Engineering, Security Architecture, Product Security, or Application Security, with a track record of owning architecture for shipping products.
• Deep, practical experience with threat modeling, attack surface analysis, secure design reviews, and architecture risk analysis at scale.
• Strong hands-on engineering background, with the ability to read and contribute to the codebase, design systems, and work as a peer with senior engineers.
• Strong understanding of cloud-native systems, APIs, endpoint agents, thick clients, and identity/security platforms.
• Hands-on experience using LLM platforms (Claude, OpenAI, or similar) in engineering or security workflows.
• Ability to influence engineering and product teams from within, acting as a persuasive, credible, and practical partner rather than a gatekeeper.
• Builder mindset, having created scalable security workflows, frameworks, or enablement programs.
• Experience building AI-native security workflows, plugins, agents, or developer tooling.

Nice to have

• Background in securing endpoint technologies, identity systems, or enterprise security platforms.
• Offensive security experience or adversarial testing background.
• Cloud security experience across AWS, Azure, or Kubernetes environments.

Details

• Location: Remote Canada or Remote United States.