Product Security Architect (Remote) Full Time

Summary

The Product Security Architect at Acuity Brands, Inc. leads security for connected products. A market-leading industrial tech firm, Acuity Brands uses its Acuity Brands Lighting and Intelligent Spaces Group segments to innovate in lighting, controls, and smart solutions, prioritizing sustainability and technology.

Responsibilities

• Design & Architecture: Lead secure development of smart and connected devices, applications, and cloud services.
• Ensure the integration of security controls across the full product lifecycle, aligning with industry best practices and compliance requirements.
• Cloud Security: Assess and ensure the security posture of cloud services (primarily Azure, but also GCP or AWS), focusing on secure communication and API interactions between backend services and connected devices.
• Risk Assessment & Management: Conduct security assessments, identify vulnerabilities, document them in the risk register, and prioritize mitigation efforts.
• Customer & Sales Enablement: Collaborate with sales and marketing teams to address customer security concerns and build customer-facing security documentation and collateral.
• Continuous Improvement & DevOps Integration: Collaborate closely with DevOps teams to integrate security measures seamlessly into the CI/CD pipeline, ensuring proactive security controls and vulnerability remediation throughout the development lifecycle.
• Recommend and implement security enhancements to address new attack vectors, fostering a continuous feedback loop between development, operations, and security.
• Threat Modeling: Perform architecture-level threat modeling using tools like Microsoft Threat Modeling Tool, OWASP Threat Dragon, Threat Modeler and apply methodologies like STRIDE and DREAD to identify and mitigate security risks early in the development lifecycle.

Requirements

• Education: Bachelor’s degree in computer science, Information Security, or a related field (or equivalent experience).
• 5+ years of experience in cybersecurity architecture, with a deep understanding of security best practices and methodologies.
• 8+ years in the IT or networking field, with experience in designing, deploying, and securing connected systems.
• Cloud Security: Hands-on experience with cloud platforms like Azure (preferred), AWS, or GCP, with a strong understanding of cloud security principles, tools, and practices.
• Solid understanding of vulnerabilities, attack vectors, and mitigation techniques (e.g., privilege escalation, buffer overflows, SQL injection).
• Experience securing IoT devices, applications, and networks, including radio communications, edge gateways, and mobile apps.
• Certifications: Security certifications such as CISSP, CISM, or equivalent is highly desirable.
• Knowledge of application security, web security, networking protocols, and cloud security.
• Experience in reviewing, designing, and defining secure system architectures and conducting architecture security reviews.
• Some familiarity with software development and application testing is a plus, particularly in the context of security testing.
• Ability to create clear and actionable security documentation.
• Strong presentation skills for conducting security awareness training and engaging with non-technical stakeholders.
• Experience developing and maintaining risk registers, conducting security reviews, and making recommendations to address vulnerabilities.

Benefits

• We value diversity and are an equal opportunity employer.
• All qualified applicants will be considered for employment without regards to race, color, age, gender, sexual orientation, gender identity and expression, ethnicity or national origin, disability, pregnancy, religion, covered veteran status, protected genetic information, or any other characteristic protected by law.
• Accommodation for Applicants with Disabilities: As an equal opportunity employer, Acuity Brands is committed to providing reasonable accommodations in its application process for qualified individuals with disabilities and disabled veterans.
• Remote Opportunities: Remote.