Principal Product Security Architect, Sprinklr

• 7 - 10 years in product or application security
• Expertise in large-scale, distributed SaaS applications
• Proficiency in threat modeling, secure design reviews, and project management
• Deep understanding of security controls for modern architectures, including API security, containerization and at least one CSPs (AWS, Azure, or GCP), with optional expertise in Kubernetes
• Knowledge of IAM concepts, Single Sign-On (OAUTH, SAML), secrets management, and microservices architecture
• Experience in network segmentation, VPNs, source code review
• Ability to rationalize security risk and articulate business risk to stakeholders
• Influencing engineering leadership to adopt secure-by-design principles
• Writing business impact reports and advising on security design controls by providing security requirements
• Strong analytical and problem-solving skills, with the ability to communicate complex security concepts to both technical and non-technical stakeholders

Desirable

• Join Sprinklr's diverse security team, spread across geographical regions, as we tackle interesting security challenges
• Our team thrives to optimize and streamline security practices across the entire Sprinklr suite of products and infrastructure within a dynamic cultural environment
• Reporting to the VP of Product Security, you will play a crucial role in shaping Sprinklr’s security architecture and strategy
• Your responsibilities will include assessing security risks, leading architectural changes, and influencing the company-wide product security program and roadmap
• Proactively assess security risks through product deep dives, threat modeling, and design reviews
• Lead initiatives to mitigate significant platform security issues with wide-reaching impact
• Define baseline security standards for applications and public clouds
• Collaborate with engineering teams on post-incident activities and roadmap creation
• Identify and promote common security design patterns
• Drive Sprinklr’s Secure Software Development Lifecycle and onboard product teams
• Identify opportunities for security tooling and automation
• Work independently with developers, cloud engineers, product owners, and other colleagues to understand product architecture and provide security requirements
• Effectively drive projects to closure, even when working with development teams that may have competing priorities
• Collaborate closely with Security, Legal, Privacy, and R&D/Engineering teams on security fixes and enhancements
• Handle urgent or reactive security situations
• Stay informed on external vulnerabilities and security trends