Product Security Architect

At TJX Companies, every day brings new opportunities for growth, exploration, and achievement. You ll be part of our vibrant team that embraces diversity, fosters collaboration, and prioritizes your development. Whether you re working in our four global Home Offices, Distribution Centers or Retail Stores TJ Maxx, Marshalls, Homegoods, Homesense, Sierra, Winners, and TK Maxx, you ll find abundant opportunities to learn, thrive, and make an impact. Come join our TJX family a Fortune 100 company and the world s leading off-price retailer.

What you'll discover

• Inclusive culture and career growth opportunities
• Global IT Organization which collaborates across U.S., Canada, Europe and Australia.
• Challenging, collaborative, and team-based environment

What you'll do

• The Cybersecurity organization bears the broad responsibilities of delivering information security, practice governance & assurance, and data loss prevention throughout the Client enterprise. Our worldwide team applies expertise and deep business understanding to ensure confidence for all company associates, investors, and customers.
• As a Product Security Architect you demonstrate deep knowledge & experience in designing and implementing security capabilities in your assigned Platform(s)/Product(s)/Product Line(s) area. You will lead the security by design aspect for your assigned area, leading the technical direction, partnering with engineers, and sharing the security defects and roadmaps of the aligned solutions. We will rely on you to help ensure that our software and infrastructure are designed and implemented with best security practices in mind. In this role, you will be expected to identify new or enhance security solution opportunities, develop solutions for known issues/enhancements, utilize strong communication skills to interact with technical and non-technical colleagues, and provide technical leadership within the Security organization.

What you'll need

We seek creative, security-minded professionals to provide hands-on talent and expertise in protecting Client and its assets. Youll work with engineers, business programs, and other security professionals to adapt and improve our security posture in applications, infrastructure, and cloud modernization efforts.

• 5-10 years of engineering experience in relevant technical domain;
• Is sought out as a trusted advisor and assists in the creation of security designs, requirements, risk monitoring and mitigation guidance in alignment with industry best practices and regulatory requirements.
• Evangelizes application security program fundamentals, tools, processes and serves as a consultative partner with technology and business teams.
• Experience with fully owning epics, features and stories to provide guidance to product / platform teams and other teams as needed;
• Manages and performs product evaluations, recommends and implements products/services for Information Security that support strategic operational needs and security requirements.
• Experience with Information Security frameworks such as NIST
• Experience within Cloud Platforms (Azure preferred)
• Experience with implementing security automation, i.e. DevSecOps
• Knows how to build a threat model, architecture, design, and test capabilities for required business features.