Principal Software Security Architect

About the role

BeyondTrust is seeking a Principal Software Security Architect to own security architecture across its product suite, from endpoint agents to cloud‑native services. This engineering leadership role is embedded in the Office of the CTO and operates with AI‑first, LLM‑driven workflows.

Key responsibilities

• Define and own end‑to‑end security architecture for assigned product lines, creating target‑state designs and secure‑by‑default patterns.
• Lead threat modeling, attack surface analysis, and secure design reviews across products, platforms, and services.
• Utilize LLM platforms (Claude, OpenAI) to scale threat analysis, abuse‑case generation, and remediation guidance.
• Embed secure‑by‑default patterns into product development and build self‑service security capabilities for engineers.
• Maintain and expand the Product Security handbook and set technical direction for secure design across the organization.

Required profile

• 10+ years of hands‑on software engineering and security architecture experience.
• Proven track record of owning security architecture for shipping products.
• Strong ability to influence engineering teams as a credible partner rather than a gatekeeper.
• Experience building scalable security workflows, frameworks, or enablement programs.

Required skills

• Threat modeling and attack surface analysis at scale.
• Secure design reviews and architecture risk analysis.
• Hands‑on experience with LLM platforms (Claude, OpenAI) in security workflows.
• Deep understanding of cloud‑native systems, APIs, endpoint agents, thick clients, and identity/security platforms.
• Practical knowledge of cloud environments such as AWS, Azure, or Kubernetes.