Senior Product Security Engineer

Summary Join Guidewire as a Senior Product Security Engineer and be a key technical expert responsible for shaping the security architecture of our industry‑leading SaaS platforms. At Guidewire, security is not a checkbox—it is a foundational pillar of the trust we build with over 540+ global insurers. About the Role In this role, you will go beyond transactional engagements and drive systemic change. You will act as a senior technical partner to our engineering and product teams, ensuring that security is embedded early and consistently into our CI/CD pipelines, cloud environments, and core product architectures. Success in this role is measured by the durability of the secure outcomes you create, the impact to technical and cultural transformations, and the trust you build with stakeholders across the organization. What You’ll Do Technical accountability and owning relationships : Own the evolution and governance of product security architecture for specific services within our SaaS platform. You will drive multi‑quarter initiatives that measurably reduce systemic risk while aligning security investments with business growth. Execution & Secure Delivery : Lead secure design reviews, threat modeling, and architecture assessments for critical features. You will partner directly with engineering teams to integrate robust security controls into distributed systems, APIs, and containerized environments. Systemic Risk Management : Identify recurring architectural risk patterns and lead efforts to remediate them at scale. You will provide leadership during security incidents and post‑incident reviews, driving the long‑term corrective actions that improve our resilience. Cross‑Functional Influence : Influence product direction without formal authority through technical credibility and sound judgment. You will frame security discussions in terms of business and customer impact, enabling informed decision‑making rather than reactive risk avoidance. Knowledge Sharing & Documentation : Produce durable documentation—including architecture guidance, threat models, and decision records—that scales security knowledge across the organization. What You’ll Bring Technical Depth : Deep expertise in SaaS product security, including IAM, authentication/authorization protocols, data protection, cloud/container security (AWS/Kubernetes), API security and zero‑trust architectures. Architectural Judgment : A proven ability to make principled trade‑offs in ambiguous situations, balancing security rigor with development velocity. Threat Modeling Excellence : Mastery of structured threat modeling and risk analysis for complex, cloud‑based systems. Strong communication : Proven ability to communicate complex security concepts and adapt communication styles to both technical and non‑technical audiences. Collaborative Mindset : A track record of building trusted relationships with Product Management, Engineering, SRE, and Compliance teams. Raising the Bar : Passion for mentoring peers and stakeholders to strengthen security intuition across the company. You model high expectations for quality, accountability, and technical excellence. Growth Mindset : A strong desire to constantly learn new things, approach problems with a growth mindset, and have a passion for solving problems through people, process and technology. Credentials : Technical certifications such as OSWE, OSCP, AWS Security, etc., are preferred; an equivalent experience and demonstrable knowledge is required. Your Impact In your first 6 months: you will establish yourself as a trusted partner to key product teams, lead architecture reviews for upcoming platform launches, and begin identifying systemic risk patterns for remediation. Over time: your work will result in a demonstrable reduction in product risk. You will have established shared standards and reference designs that allow Guidewire to ship safely and predictably at scale, influencing the long‑term technology roadmap for the world’s leading P&C insurance platform. About Guidewire Guidewire is the platform P&C insurers trust to engage, innovate, and grow efficiently. We combine digital, core, analytics, and AI to deliver our platform as a cloud service. More than 540+ insurers in 40 countries, from new ventures to the largest and most complex in the world, run on Guidewire. As a partner to our customers, we continually evolve to enable their success. We are proud of our unparalleled implementation track record with 1600+ successful projects, supported by the largest R&D team and partner ecosystem in the industry. Our Marketplace provides hundreds of applications that accelerate integration, localization, and innovation. For more information, please visit and follow us on Twitter: @Guidewire_PandC. Equal Opportunity Statement Guidewire Software, Inc. is proud to be an equal opportunity and affirmative action employer. We are committed to an inclusive workplace, and believe that a diversity of perspectives, abilities, and cultures is a key to our success. Qualified applicants will receive consideration without regard to race, color, ancestry, religion, sex, national origin, citizenship, marital status, age, sexual orientation, gender identity, gender expression, veteran status, or disability. All offers are contingent upon passing a criminal history and other background checks where it's applicable to the position. #J-18808-Ljbffr Guidewire