Senior Product Security Engineer

Summary

Become a vital technical authority at Guidewire as a Senior Product Security Engineer, responsible for defining and advancing the security framework of our prominent SaaS platforms. At Guidewire, security is a core value that reinforces the trust shared with more than 540 insurance companies worldwide.

Key Responsibilities

• Lead and govern the product security architecture evolution for designated services within our SaaS ecosystem, tackling multi-quarter projects that reduce systemic vulnerabilities and align security efforts with business objectives.
• Conduct secure design evaluations, threat modeling, and architectural reviews of critical product features, collaborating closely with engineering teams to embed strong security measures into distributed systems, APIs, and containerized platforms.
• Identify widespread architectural security risks and spearhead initiatives to mitigate them at scale; manage incident responses and post-mortems to enhance overall system resilience.
• Use technical expertise and judgment to influence product strategies across departments by communicating security considerations in business-impact terms, fostering proactive decision-making.
• Create and maintain comprehensive security documentation such as architecture guidance, threat models, and decision logs to disseminate security knowledge within the organization.

Required Qualifications and Skills

• In-depth knowledge of SaaS product security areas including identity and access management, authentication/authorization standards, data protection, cloud and container security (AWS, Kubernetes), API security, and zero trust frameworks.
• Strong architectural decision-making capability, balancing security demands with software delivery speed under uncertain conditions.
• Expertise in structured threat modeling and risk assessment for complex cloud infrastructure.
• Excellent communication skills tailored to diverse technical and non-technical audiences.
• Proven ability to build collaborative relationships with product managers, engineers, site reliability engineers, and compliance teams.
• Commitment to mentoring and elevating security awareness and standards throughout the company.
• Continuous learner with a growth mindset focused on solving issues through a blend of people, processes, and technology.
• Preferred certifications include OSWE, OSCP, AWS Security or equivalent demonstrated experience.

Impact Expectations

• Within six months, become a trusted security partner for key product teams, lead architectural security reviews, and identify overarching risk patterns needing remediation.
• Over time, drive a measurable decrease in product security risks, establish scalable security standards, and influence the long-term technology roadmap for Guidewire's insurance platform.

About Guidewire

Guidewire delivers digital, core, analytics, and AI-powered cloud services trusted by over 540 insurers globally. Our platform supports growth and innovation in the P&C insurance market through a vast ecosystem of applications and partnerships. We emphasize diversity, inclusion, and equal opportunity as key drivers of our success.

Equal Opportunity Statement

We are committed to creating a diverse, inclusive workplace and consider all qualified applicants without bias to race, religion, gender identity, veteran status, or disability. Employment offers depend on relevant background checks.