Principal Software Security Architect

BeyondTrust as a Principal Software Security Architect, where you will own the security architecture for our product suite, including endpoint agents, thick clients, SaaS platforms, APIs, identity systems, and cloud-native services. This engineering leadership role is embedded within the Engineering and Architecture teams in the Office of the CTO.

The ideal candidate has 10+ years of experience in software engineering and security architecture, with deep expertise in threat modeling and attack surface reduction at scale.

Responsibilities

• You will be responsible for designing security into products from first principles through to production, leading threat modeling, attack surface analysis, and secure design reviews.
• You will also use AI-first workflows to scale threat analysis and architecture review, and contribute to the Product Security handbook.
• Own end-to-end security architecture for assigned product lines, from concept through production, defining the target-state architecture and secure-by-default patterns each product builds on.
• Lead threat modeling, attack surface analysis, and secure design reviews across products, platform services, endpoint agents, and cloud-native systems, driving the architectural decisions that eliminate unnecessary exposure.
• Use LLM platforms (Claude, OpenAI) as core tools to scale threat analysis, abuse-case generation, architecture review, and remediation guidance, building the prompts, plugins, skills, and agent workflows that make the engineering org faster and more consistent.
• Deep, practical experience with threat modeling, attack surface analysis, secure design reviews, and architecture risk analysis at scale, not just in theory

Requirements

• The ideal candidate brings 10+ years of hands-on software engineering and security architecture experience, deep expertise in threat modeling and attack surface reduction at scale, and practical experience applying LLM platforms to security engineering work
• Ability to influence engineering and product teams from within, acting as a persuasive, credible, and practical partner rather than a gatekeeper
• Strong hands-on engineering background, with the ability to read and contribute to the codebase, design systems, and earn credibility with senior engineers as a peer
• Strong understanding of cloud-native systems, APIs, endpoint agents, thick clients, and identity/security platforms
• Builder mindset, having created scalable security workflows, frameworks, or enablement programs, not just consumed them
• 10+ years in Software Engineering, Security Architecture, Product Security, or Application Security, with a track record of owning architecture for shipping products
• Offensive security experience or adversarial testing background

Preferred

• Experience building AI-native security workflows, plugins, agents, or developer tooling
• Hands-on experience using LLM platforms (Claude, OpenAI, or similar) in engineering or security workflows
• Background in securing endpoint technologies, identity systems, or enterprise security platforms
• Cloud security experience across AWS, Azure, or Kubernetes environments