Principal Product Security Architect

A principal architect on the Chan Zuckerberg Initiative's Product Security team, part of Information Security, who shapes application and product security for CZI, Biohub and Learning Commons. The focus is removing whole classes of vulnerabilities by building paved roads and secure frameworks. The role is hybrid in Redwood City.

The architect designs security tooling, automation and frameworks for engineering teams, moves detection and prevention into the development workflow, gives timely guidance to app teams, runs security projects end to end, reports risk metrics, and supports threat modelling and incident response. CZI wants five or more years of security-focused technical program management or similar, secure SDLC and CI/CD control experience, SAST, DAST and SCA, container and cloud security, and reference architecture work.