Principal Product Architect - Cyber Security

We're looking for a Principal Product Architect to own the technical architecture behind the company's integrated product portfolio, from external attack surface management to internal attack surface management to detection and response platforms. This is a hands-on, high-influence role for someone who has spent their career inside cybersecurity product companies, understands how attackers and defenders actually operate, and knows how to translate that understanding into scalable, secure, and elegant product architecture. You'll set technical direction across multiple product lines, partner closely with Product Management and Engineering leadership, and mentor architects and senior engineers across the organization.

Responsibilities:

• Own end-to-end architecture for the company's integrated security platform (e. g., MXDR/SOC platform, EASM, IASM, GRC tooling), from concept through scale, ensuring designs are secure, resilient, and built for multi-tenant, high-volume telemetry environments.
• Translate a deep, current understanding of the threat landscape, adversary tactics, techniques, and procedures (TTPs), emerging attack vectors, and the evolving regulatory environment into product and platform decisions.
• Define architectural standards, patterns, and guardrails (data ingestion pipelines, detection engines, API design, identity and access controls, cloud infrastructure) that scale across the platform.
• Partner with Product Management to shape roadmap decisions, evaluating technical feasibility, security implications, and build-vs-buy trade-offs for new capabilities.
• Lead architecture reviews and design decisions in collaboration with engineering teams, ensuring consistency across services while leaving room for team-level autonomy.
• Evaluate and integrate third-party threat intelligence feeds, detection frameworks (e. g., MITRE ATT& CK), and security tooling into the product architecture.
• Act as a technical authority in conversations with customers, prospects, and partners on product architecture, security posture, and platform capabilities.
• Mentor senior engineers and product architects, raising the technical bar across the organization.
• Stay current on the threat landscape and competitive product landscape, proactively bringing in ideas that keep the company's products differentiated and effective.

Requirements:

• 12+ years of experience in software/security engineering, with a substantial portion spent at cybersecurity product companies (e. g., EDR/XDR, SIEM/SOAR, vulnerability management, CTEM, and cloud security platforms).
• A track record of architecting cybersecurity products end-to-end, not just consuming security tools but having built them.
• Strong, current understanding of the threat landscape: attacker TTPs, the MITRE ATT& CK framework, common attack vectors across network, cloud, identity, and application layers, and how detection and response systems are designed to counter them.
• Proven experience designing distributed, cloud-native architectures that handle high-volume, high-velocity security telemetry (logs, alerts, and events), with an emphasis on reliability and low-latency detection.
• Deep knowledge of security architecture principles: zero trust, defense in depth, secure-by-design development, identity and access management, and data protection.
• Hands-on fluency with cloud platforms (AWS, Azure, or GCP), modern data pipelines, and API-first design.
• Experience partnering directly with product management and executive stakeholders to shape roadmaps and make architectural trade-offs under real business constraints.
• Excellent communication skills; able to explain complex technical and threat concepts clearly to engineers, product managers, customers, and leadership alike.

Nice to Have:

• Experience architecting SOC platforms, MXDR/managed detection services, or attack surface management tooling specifically.
• Prior experience in an offensive security context (red team, penetration testing, or adversary simulation) that informs how you think about defensive product design.
• Relevant industry certifications (OSCP, CISSP, GCIA, GCTI, or similar).
• Experience building or scaling products at a high-growth cybersecurity startup.