Senior Product Security Engineer

Stack

Responsibilities

• ▹Own the evolution and governance of product security architecture for specific SaaS platform services
• ▹Drive multi-quarter initiatives that measurably reduce systemic risk
• ▹Lead secure design reviews, threat modeling and architecture assessments for critical features
• ▹Partner directly with engineering teams to integrate robust security controls into distributed systems, APIs and containerized environments
• ▹Identify recurring architectural risk patterns and lead efforts to remediate them at scale
• ▹Provide leadership during security incidents and post-incident reviews, driving long-term corrective actions
• ▹Produce durable documentation including architecture guidance, threat models and decision records

Requirements

• ▹Deep expertise in SaaS product security, including IAM, authentication/authorization protocols, data protection, cloud/container security (AWS/Kubernetes), API security and zero trust architectures
• ▹Proven ability to make principled trade-offs in ambiguous situations, balancing security rigor with development velocity
• ▹Mastery of structured threat modeling and risk analysis for complex, cloud-based systems
• ▹Strong communication skills to convey complex security concepts to technical and non-technical audiences
• ▹Track record of building trusted relationships with Product Management, Engineering, SRE and Compliance teams

Soft skills

About the company

Guidewire provides industry-leading SaaS platforms where security is a foundational pillar; the company has built trust with over 540 global insurers.