Director, Product Security Architect (AI)

Location: Toronto, Canada

Annual base salary: CAD 138,200–181,400

Company

hirify.global develops SaaS solutions for Sales Performance Management, helping revenue organizations improve go-to-market strategies and seller performance.

What you will do

• Define and execute the Product Security Architecture and Secure-by-Design strategy, roadmap, reference architectures, standards, and reusable security patterns.
• Lead threat modeling and risk analysis across critical applications, cloud platforms, and AI-enabled systems, documenting attack paths, abuse cases, trust boundaries, security requirements, and remediation actions.
• Partner with Product, Engineering, Architecture, Cloud Operations, AI, Security, and Legal teams to embed security requirements into epics, user stories, development workflows, and the AI SDLC.
• Review distributed systems, microservices, APIs, mobile applications, identity solutions, containerized workloads, Kubernetes, serverless systems, and cloud-native architectures.
• Conduct architecture reviews across AWS, Azure, and IBM Cloud, and define cloud security and AI security guardrails, governance models, and deployment patterns.
• Communicate architectural risks and recommendations to technical and executive stakeholders while validating security fixes and design changes.

Requirements

• 10+ years of information security experience, including significant hands-on experience in product security, application security, security architecture, or software security engineering.
• 3+ years of hands-on application security architecture and threat modeling experience.
• 3–5 years of software development or software engineering experience.
• Strong knowledge of secure application design, cloud security, modern software architectures, DevSecOps, secure SDLC practices, and AI-enabled development environments.
• Experience securing web, API, mobile, cloud-native, and AI-enabled applications, with knowledge of AWS, Azure, or IBM Cloud security architectures.
• Expertise in threat modeling methodologies including STRIDE, CAPEC, and MITRE ATT&CK, plus strong stakeholder communication skills.

Nice to have

• ISC2 ISSAP, CISSP, CSSLP, OSCP, or relevant cloud security certifications.

Culture & Benefits

• Comprehensive medical, dental, and vision coverage tailored to local needs.
• PTO, public holidays, and dedicated volunteer days.
• Ignite Days, tuition assistance, and support for continuing education and professional development.
• Retirement plans and market-based compensation.
• Remote and hybrid options are available across most regions.

Hiring process

• AI tools assist with candidate screening and assessment alongside human decision-making.
• Interview assessment considers qualifications and market data when determining the final base salary.