Founded in 2010, CLEARs mission is to create frictionless experiences. With more than 12+ million members & hundreds of partners across the world, CLEARs identity platform is transforming the way people live, work, & travel. Whether its at the airport, stadium, or right on your phone, CLEAR connects you to the things that make you, you - making everyday experiences easier, more secure, & more seamless. Since day one, CLEAR has been committed to privacy done right. 

The Senior Product Security Architect is an advanced skillset position that reports to the Sr. Director of Product Security & frequently interacts with the head of product security as well as risk & compliance. The Senior Product Security Architect focuses on protecting client data & services. This is achieved by working closely with many diverse & dynamic teams, including, but not limited to, security engineering, IT infrastructure, application development, security operations, security audit & end users. This position is also responsible for architecting solutions to secure business-to-business initiatives, third-party relationships, outsourced solutions & vendors.

What You Will Do:

• Remain current with new security threats & assess systems to ensure they can defend the business
• Constantly research capabilities of current & new disruptive solutions on the market & make recommendations to security leadership
• Define & communicate product security strategy
• Research, validate & deploy solutions meeting security & business needs
• Formally develop product security standards, policies, procedures & processes
• Possess a DevOps focus across technology & security architecture, automation, integration & distribution
• Drive security efficiencies, enabling product security team members to work on more advanced tasks
• Partner with product, technology, risk, compliance, legal & business teams
• Mentor junior members of the product security team
• Perform other duties as assigned

Who You Are:

• 5-8+ years experience in cybersecurity, including compliance & risk management with a background in application security
• Experience in cloud computing technologies, including software-, infrastructure & platform-as-a-service, as well as public, private & hybrid environments
• Excellence in communicating business risk from cybersecurity issues
• A proven deep background (preferred 5+ years in addition to cybersecurity) in technology design, implementation & delivery
• Track record of acting with integrity, taking pride in work, seeking to excel, being curious & adaptable, & communicating effectively
• Experience with Amazon Web Services (AWS) or Microsoft Azure 
• Proficient with scripting in languages such as Python, JavaScript, PowerShell, PHP or Ruby
• DevOps background with experience in compliance obligations
• Experience with one or more of the following: ISO 27001, NIST, Payment Card Industry Data Security Standard (PCI DSS), Health Information Portability & Accountability Act (HIPAA), Health Information Technology for Economic & Clinical Health (HITECH) Act, Sarbanes-Oxley Act (SOX) the General Data Protection Regulation (GDPR), Center for Internet Security (CIS) standards or Service Organization Controls (SOC) 2
• Working knowledge of Windows, Linux & Unix
• Ability to think strategically & tactically, with effective decision-making skills
• Experience with purple teaming (red & blue) to train, identify & remediate issues cohesively
• Highly trustworthy; leads by example

#LI-Hybrid