Senior Product Security Architect (Cybersecurity)

Location: Hybrid in Scottsdale, Phoenix, Chicago, San Francisco, or New York; candidates must be eligible to work in the United States for any employer.

Salary: $160,000–$200,000 USD per year in Phoenix or Chicago; $192,000–$240,000 USD per year in San Francisco. Additional discretionary incentive plan and benefits are available.

Company

hirify.global provides payment and financial technology solutions, including Zelle and Paze, for financial institutions, consumers, and small businesses.

What you will do

• Lead product security efforts across applications, hosts, cloud-native products, and microservices.
• Develop threat models, security architectures, reference patterns, and security policies for new and legacy systems.
• Evaluate product business cases, design specifications, technology stacks, and infrastructure against security standards and frameworks.
• Partner with Product Development, Engineering, Architecture, and Project Management teams to integrate security controls into CI/CD environments.
• Coordinate product security analysis and penetration testing, including scoping tests and mitigating identified vulnerabilities.
• Support incident response, risk management, customer bank security requirements, and security issue remediation.

Requirements

• Bachelor’s degree in Computer Science, Engineering, Mathematics, Physical Science, or equivalent experience.
• 10+ years of engineering, IT, or information security experience, including 6+ years in application security, security architecture, consulting, or related areas.
• Advanced knowledge of application, operating system, network, database, and cloud security architectures, including Windows and Linux.
• Experience with threat modeling, control design, security for cloud-hosted products, and security integration into CI/CD.
• Experience analyzing technical issues, recommending corrective actions, presenting to stakeholders, and managing information security initiatives.
• Must independently possess U.S. work eligibility at the date of hire; this position is not eligible for employment visa sponsorship.

Nice to have

• CEH, CPT, CISSP, CSSLP, GWEB, secure development, CISA, or related certifications.
• Experience with GCP, AWS, Azure, Kubernetes, VMware, OpenStack, SAST, and composition analysis tools.
• Expertise in threat modeling, network security, cryptography, authentication, authorization, and security reference architectures.
• Experience with enterprise architecture, automated security controls, product lifecycle security, and the BSIMM framework.

Culture & Benefits

• Hybrid work model for roles based in the listed offices.
• Medical, dental, and vision coverage with HSA and FSA options.
• 401(k) plan with a 100% company safe harbor match on the first 6% of deferral.
• Flexible time off or generous PTO, 11 paid company holidays, and a paid volunteer day.
• 12 weeks of paid parental leave and family planning support.