Job Description
About the Role
Join Guidewire as a Senior Product Security Engineer and be a key technical expert responsible for shaping the security architecture of our industry-leading SaaS platforms. At Guidewire, security is not a checkbox—it is a foundational pillar of the trust we build with over 540+ global insurers.
In this role, you will go beyond transactional engagements and drive systemic change. You will act as a senior technical partner to our engineering and product teams, ensuring that security is embedded early and consistently into our CI/CD pipelines, cloud environments, and core product architectures. Success in this role is measured by the durability of the secure outcomes you create, the impact to technical and cultural transformations, and the trust you build with stakeholders across the organization.
What You’ll Do
Technical accountability and owning relationships: Own the evolution and governance of product security architecture for specific services within our SaaS platform. You will drive multi-quarter initiatives that measurably reduce systemic risk while aligning security investments with business growth.
Execution & Secure Delivery: Lead secure design reviews, threat modeling, and architecture assessments for critical features. You will partner directly with engineering teams to integrate robust security controls into distributed systems, APIs, and containerized environments.
Systemic Risk Management: Identify recurring architectural risk patterns and lead efforts to remediate them at scale. You will provide leadership during security incidents and post-incident reviews, driving the long-term corrective actions that improve our resilience.
Cross-Functional Influence: Influence product direction without formal authority through technical credibility and sound judgment. You will frame security discussions in terms of business and customer impact, enabling informed decision-making rather than reactive risk avoidance.
Knowledge Sharing & Documentation: Produce durable documentation—including architecture guidance, threat models, and decision records—that scales security knowledge across the organization.
What You’ll Bring
Technical Depth: Deep expertise in SaaS product security, including IAM, authentication/authorization protocols, data protection, cloud/container security (AWS/Kubernetes), API security and zero trust architectures.
Architectural Judgment: A proven ability to make principled trade-offs in ambiguous situations, balancing security rigor with development velocity.
Threat Modeling Excellence: Mastery of structured threat modeling and risk analysis for complex, cloud-based systems.
Strong communication: Proven ability to communicate complex security concepts and adapt communication styles to both technical and non-technical audiences.
Collaborative Mindset: A track record of building trusted relationships with Product Management, Engineering, SRE, and Compliance teams.
Raising the Bar: Passion for mentoring peers and stakeholders to strengthen security intuition across the company. You model high expectations for quality, accountability, and technical excellence.
Growth Mindset: A strong desire to constantly learn new things, approach problems with a growth mindset, and have a passion for solving problems through people, process and technology.
Credentials: Technical certifications such as OSWE, OSCP, AWS Security, etc., are preferred; An equivalent experience and demonstrable knowledge is required.
Your Impact: We believe in clarity and setting you up for success.
In your first 6 months: You will establish yourself as a trusted partner to key product teams, lead architecture reviews for upcoming platform launches, and begin identifying systemic risk patterns for remediation.
Over time: Your work will result in a demonstrable reduction in product risk. You will have established d standards and reference designs that allow Guidewire to ship safely and predictably at scale, influencing the long-term technology roadmap for the world’s leading P&C insurance platform.
