Overview: We are seeking an experienced Product Security Architect to drive the security strategy, architecture, and secure engineering practices across the OpenEdge product portfolio. This role serves as the primary security authority for OpenEdge, partnering closely with Product Management, Engineering, Architecture, DevOps, Corporate Security, and SSCoE teams to ensure security is embedded throughout the product lifecycle.
The ideal candidate is a seasoned product security professional with deep knowledge of enterprise software platforms, secure software development, cloud and on-premises security models, vulnerability management, compliance frameworks, and security architecture. This individual will provide strategic technical leadership, influence product direction, and champion a security-first engineering culture.
In this role you will:
Product Security Strategy & Architecture
- Define and maintain the overall security architecture and roadmap for OpenEdge products.
- Act as the principal security advisor for product management, engineering leadership, and architecture teams.
- Evaluate emerging threats, technologies, and industry trends to influence product security investments.
- Lead security design reviews for major architectural initiatives and new product capabilities.
- Ensure security requirements are incorporated during roadmap planning and architectural runway activities.
Secure Software Development Lifecycle (SSDLC)
- Establish and enforce secure development practices across all OpenEdge teams.
- Define security quality gates for software design, implementation, testing, build, and release processes.
- Drive adoption and continuous improvement of OWASP SAMM and secure SDLC maturity initiatives.
- Provide guidance on secure coding, security testing, and vulnerability remediation practices.
Threat Modeling & Risk Management
- Lead threat modeling exercises for OpenEdge platform components.
- Identify and assess product security risks and recommend mitigation strategies.
- Conduct architecture risk assessments for new features, integrations, APIs, AI capabilities, and cloud services.
- Maintain risk registers and communicate security posture to leadership.
Security Testing & Vulnerability Management
- Drive SAST, DAST, SCA, penetration testing, and code review initiatives.
- Partner with engineering teams to prioritize and remediate vulnerabilities.
- Define vulnerability response, SLA tracking, and remediation processes.
- Provide technical oversight for coordinated vulnerability disclosure programs.
Platform & Infrastructure Security
- Establish security requirements for the OpenEdge Database, PASOE, authentication and authorization services, MCP integrations, DevOps tooling, cloud deployments, and container or Kubernetes platforms.
- Define secure deployment architectures and hardening recommendations.
Compliance & Governance
- Drive compliance initiatives, including SOC 2, security certifications, FIPS-related requirements, customer security assessments, and regulatory or contractual security obligations.
- Lead SBOM strategy, third-party component governance, and software supply chain security initiatives.
- Partner with Legal, Compliance, and Corporate Security teams to address security requirements.
Security Leadership & Cross-Functional Collaboration
- Serve as a trusted technical leader across OpenEdge Engineering.
- Mentor engineers, security champions, and architects on product security best practices.
- Influence strategic security decisions and investment prioritization.
- Present security posture, risks, and recommendations to senior leadership and executives.
Incident Response & Security Operations
- Support investigation of security incidents affecting OpenEdge products.
- Coordinate root-cause analysis and long-term remediation initiatives.
- Define product security response and communication processes.
Your background:
Education
- Bachelor's or Master's degree in Computer Science, Engineering, Cybersecurity, or a related discipline.
Experience
- 12+ years in software engineering, product security, or security architecture.
- 5+ years leading product security strategy for enterprise software products.
- Experience securing large-scale commercial software platforms.
- Proven success influencing engineering organizations and executive stakeholders.
Technologies
- C/C++, Java, JavaScript, and Python
- Linux/Unix and Windows Server
- Databases, REST APIs, and microservices architecture
Preferred Qualifications
- Experience with OpenEdge architecture, ABL, PASOE, OpenEdge Database, SQL, DevOps tooling, and enterprise middleware.
- Experience implementing AI/ML security controls and securing agentic AI systems.
- Experience supporting customer security reviews and enterprise compliance requests.
Leadership Competencies
- Strategic thinking and technical leadership
- Influencing without authority
- Executive communication
- Risk-based decision-making
- Cross-functional collaboration
- Mentoring and coaching
- Customer-centric mindset
Ideal Candidate Profile
A highly respected OpenEdge technical expert who combines deep platform knowledge with modern product security, DevSecOps, architecture governance, and executive-level leadership capabilities, acting as the security equivalent of a chief architect for the product.
- Competitive remuneration package
- Employee Stock Purchase Plan Enrolment
- 30 days of earned leave
- An extra day off for your birthday
- Various other leaves like marriage leave, casual leave, maternity leave, and paternity leave
- Premium Group Medical Insurance for employees and five dependents, personal accident insurance coverage, and life insurance coverage
- Professional development reimbursement
- Interest subsidy on loans - either vehicle or personal loans.
Skills Required
- Bachelor's or Master's degree in Computer Science, Engineering, Cybersecurity, or a related discipline
- 12+ years of experience in software engineering, product security, or security architecture
- 5+ years leading product security strategy for enterprise software products
- Experience securing large-scale commercial software platforms
- Demonstrated success influencing engineering organizations and executive stakeholders
- Experience with OpenEdge architecture, ABL, PASOE, OpenEdge Database, SQL, DevOps tooling, and enterprise middleware
- Experience implementing AI/ML security controls and securing agentic AI systems
- Experience supporting customer security reviews and enterprise compliance requests
Progress Software Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about Progress Software and has not been reviewed or approved by Progress Software.
-
Equity Value & Accessibility — Equity participation includes an employee stock purchase plan with a discounted purchase and an extended lookback window, improving accessibility and potential upside. Many roles highlight this plan as a standout component of total rewards.
-
Leave & Time Off Breadth — Time off offerings include flexible or unlimited PTO, paid holidays, a birthday day off, parental leave, and paid volunteer time. Hybrid and remote options help make time-off policies more usable.
-
Wellbeing & Lifestyle Benefits — Coverage spans medical, dental, vision, life and disability, mental health resources, an EAP, wellness programs, and optional add-ons like pet and identity protection. Professional development support, recognition programs, and workplace perks add to overall lifestyle value.
Progress Software Insights
What We Do
Progress Software empowers organizations to achieve transformational success in the face of disruptive change. Our software enables our customers to develop, deploy and manage responsible AI-powered applications and personalized digital experiences with agility and ease. Businesses of all sizes get a trusted provider in Progress, with the products, expertise and vision they need to turn AI disruption into a competitive advantage. Millions of developers and technologists at hundreds of thousands of organizations depend on Progress every day. Learn more at www.progress.com.
Gallery
