Product Security Architect

Product Security Architect

At TJX Companies, every day brings new opportunities for growth, exploration, and achievement. You'll be part of our vibrant team that embraces diversity, fosters collaboration, and prioritizes your development. Whether you're working in our four global Home Offices, Distribution Centers or Retail Stores—TJ Maxx, Marshalls, Homegoods, Homesense, Sierra, Winners, and TK Maxx, you'll find abundant opportunities to learn, thrive, and make an impact. Come join our TJX family—a Fortune 100 company and the world's leading off-price retailer.

What you'll discover

• Inclusive culture and career growth opportunities
• Global IT Organization which collaborates across U.S., Canada, Europe and Australia.
• Challenging, collaborative, and team-based environment

What you'll do

The Cybersecurity organization bears the broad responsibilities of delivering information security, practice governance & assurance, and data loss prevention throughout the Client enterprise. Our worldwide team applies expertise and deep business understanding to ensure confidence for all company associates, investors, and customers. As a Product Security Architect you demonstrate deep knowledge & experience in designing and implementing security capabilities in your assigned Platform(s)/Product(s)/Product Line(s) area. You will lead the security by design aspect for your assigned area, leading the technical direction, partnering with engineers, and sharing the security defects and roadmaps of the aligned solutions. We will rely on you to help ensure that our software and infrastructure are designed and implemented with best security practices in mind. In this role, you will be expected to identify new or enhance security solution opportunities, develop solutions for known issues/enhancements, utilize strong communication skills to interact with technical and non-technical colleagues, and provide technical leadership within the Security organization.

What you'll need

• 5-10 years of engineering experience in relevant technical domain;
• Is sought out as a trusted advisor and assists in the creation of security designs, requirements, risk monitoring and mitigation guidance in alignment with industry best practices and regulatory requirements.
• Evangelizes application security program fundamentals, tools, processes and serves as a consultative partner with technology and business teams.
• Experience with fully owning epics, features and stories to provide guidance to product / platform teams and other teams as needed;
• Manages and performs product evaluations, recommends and implements products/services for Information Security that support strategic operational needs and security requirements.
• Experience with Information Security frameworks such as NIST
• Experience within Cloud Platforms (Azure preferred)
• Experience with implementing security automation, i.e. DevSecOps
• Knows how to build a threat model, architecture, design, and test capabilities for required business features.

In addition to our open door policy and supportive work environment, we also strive to provide a competitive salary and benefits package. TJX considers all applicants for employment without regard to race, color, religion, gender, sexual orientation, national origin, age, disability, gender identity and expression, marital or military status, or based on any individual's status in any group or class protected by applicable federal, state, or local law. TJX also provides reasonable accommodations to qualified individuals with disabilities in accordance with the Americans with Disabilities Act and applicable state and local law.