Director of Product Security

Copilot said: Director, Product Security - Full-Time / Canada
A fast-growing SaaS organization is seeking a Director, Product Security to help shape and mature security architecture across its cloud-based products, applications, and emerging AI-driven solutions. Based in Toronto, this full-time leadership opportunity is ideal for a highly technical security professional who enjoys partnering directly with engineering teams to build secure, scalable systems from the ground up.

This role sits at the intersection of security, software engineering, cloud architecture, and product development. You'll have the opportunity to influence how security is embedded throughout the development lifecycle, helping teams design resilient platforms while proactively reducing risk before products reach production. The ideal candidate is a hands-on security leader who can balance technical depth with strategic influence, driving secure-by-design practices across a growing technology organization.
Required Skills & Experience

• 10+ years of experience in cybersecurity, application security, product security, or security architecture roles
• Strong hands-on background reviewing and securing modern software architectures and cloud-native applications
• Experience building or leading secure-by-design initiatives within software development organizations
• Proven expertise conducting threat modeling, architecture assessments, and application security reviews
• Experience collaborating closely with software engineering, product, and infrastructure teams
• Strong understanding of cloud security principles across enterprise-scale environments
• Knowledge of secure development practices, DevSecOps methodologies, and risk-based security decision making
• Experience identifying architectural weaknesses and translating findings into actionable remediation plans
• Ability to communicate technical risks and recommendations to both engineering teams and executive stakeholders

Desired Skills & Experience

• Experience securing distributed applications, microservices, APIs, and mobile platforms
• Familiarity with modern threat modeling frameworks and attack simulation methodologies
• Exposure to containerized, Kubernetes-based, or serverless environments
• Experience supporting security initiatives related to AI-enabled products and machine learning systems
• Knowledge of application security testing, penetration testing results analysis, and vulnerability management
• Experience establishing engineering security standards, reusable design patterns, and governance frameworks
• Industry certifications such as CISSP, CSSLP, OSCP, ISSAP, or cloud security certifications are considered assets
• Strong understanding of software architecture principles and modern engineering practices

What You Will Be Doing Tech Breakdown

• 40% Product Security Architecture & Secure Design
• 35% Threat Modeling, Risk Analysis & Security Review
• 25% Cloud Security, AI Security & Governance

Daily Responsibilities

• 40% Working directly with engineering and product teams to improve application and platform security
• 30% Leading architecture reviews, threat assessments, and security design initiatives
• 30% Developing standards, providing technical guidance, and influencing security strategy across the organization

The Offer

• Up to $180,000 per year

You will receive the following benefits:

• Medical, Dental, and Vision Insurance
• Vacation Time
• Stock Options
• Bonus
• RRSP matching

Current Vacancy: Yes

Use of AI in Hiring: Yes

Applicants must be currently authorized to work in Canada on a full-time basis now and in the future.