Director, Product Security Architect (AI)

Location: Canada; remote workplace. Remote and hybrid options are available across most regions.

Annual base salary: $138,200–$181,400 CAD, with potential bonuses and other incentive compensation.

Company

hirify.global presents this opportunity on behalf of a partner company developing SaaS products, cloud platforms, and AI-enabled solutions.

What you will do

• Define and execute the Product Security Architecture and Secure-by-Design strategy, roadmap, standards, and reference architectures.
• Embed security requirements into product development workflows, epics, user stories, and AI software development lifecycle processes.
• Lead threat modeling and security architecture reviews, including data flow diagrams, trust boundary analysis, abuse cases, attack paths, remediation plans, and residual risk documentation.
• Review distributed systems, microservices, APIs, mobile applications, identity solutions, containers, Kubernetes, serverless environments, and AI-enabled architectures.
• Establish reusable threat models, secure design patterns, security requirements, architecture libraries, and cloud security guardrails across AWS, Azure, and IBM Cloud.
• Partner with Product, Engineering, Architecture, Cloud Operations, AI, Legal, and Security teams to reduce architectural risk and validate remediation.

Requirements

• 10+ years of information security experience, including substantial hands-on experience in Product Security, Application Security, Security Architecture, or Software Security Engineering.
• 3+ years of hands-on Application Security Architecture and Threat Modeling experience, plus 3–5 years of software development or engineering experience.
• Strong knowledge of secure application design, cloud security, modern software architectures, DevSecOps, and secure SDLC practices.
• Experience securing web, API, mobile, cloud-native, and AI-enabled applications, with knowledge of STRIDE, CAPEC, and MITRE ATT&CK.
• Practical knowledge of AWS, Azure, or IBM Cloud security architectures; experience with LLM security, AI development environments, or agentic architectures is highly relevant.
• Strong analytical, communication, stakeholder management, and risk-based decision-making skills.

Nice to have

• ISC2 ISSAP, CISSP, CSSLP, OSCP, or cloud security certifications.

Culture & Benefits

• Comprehensive medical, dental, and vision coverage tailored to local needs.
• Paid time off, public holidays, and dedicated volunteer days.
• Ignite Days for learning, professional development, and continuous skill growth.
• Retirement plans and tuition assistance for continuing education.
• Collaborative and inclusive environment focused on innovation, learning, and professional growth.

Hiring process

• hirify.global uses an AI-powered matching process to evaluate applications against the role's core requirements.
• Shortlisted candidates are shared with the hiring company, which manages interviews, assessments, and subsequent steps.