Product Security Architect

Headquartered in the United States, TP-Link Systems Inc. is a global provider of reliable networking devices and smart home products, consistently ranked as the world’s top provider of Wi-Fi devices. The company is committed to delivering innovative products that enhance people’s lives through faster, more reliable connectivity. With a commitment to excellence, TP-Link serves customers in over 170 countries and continues to grow its global footprint.

We believe technology changes the world for the better! At TP-Link Systems Inc, we are committed to crafting dependable, high-performance products to connect users worldwide with the wonders of technology. Embracing professionalism, innovation, excellence, and simplicity, we aim to assist our clients in achieving remarkable global performance and enable consumers to enjoy a seamless, effortless lifestyle.

TP-Link Systems Inc. is seeking a Product Security Architect to lead product security architecture across its networking, smart home, and connected-device portfolio. Reporting to the Senior Director of Product Security, the Product Security Architect is a senior technical leader responsible for advancing secure‑by‑design practices across TP‑Link's product lines. The role partners with R&D, product management, manufacturing, legal, and regulatory teams to ensure that security is designed into products from concept through development, manufacturing, release, and ongoing support, and that products continue to meet applicable industry standards and regulatory requirements throughout their supported life.

The Product Security Architect translates TP‑Link's product security strategy into reusable security architectures, practical engineering requirements, and consistent design guidance for embedded, cloud, and mobile components, and provides technical leadership for architecture review, threat modeling, vulnerability response, and the integration of security tooling, automation, and AI‑assisted analysis into engineering workflows.

• Set the security architecture strategy for TP-Link’s connected-device products.
• Develop security requirements, reference architectures, and design patterns that engineering teams can use.
• Lead threat modeling and security reviews for major products, platforms, and features.
• Guide security from first design through end of support, including manufacturing and device provisioning.
• Provide technical direction for device identity, secure boot, roots of trust, code signing, key management, and secure updates.
• Lead the integration of SAST, software composition analysis, SBOM generation, firmware analysis, and binary analysis into CI/CD pipelines and development workflows.
• Establish how tool findings, third‑party components, and software supply chain risk get tracked and fixed across products.
• Use AI and automation to make architecture reviews, code analysis, vulnerability investigation, and remediation faster and more consistent.
• Provide technical leadership for PSIRT and complex vulnerability investigations.
• Advise R&D, Product Management, Manufacturing, Legal, Regulatory, Communications, and company leadership on significant product security risks and decisions.
• Mentor security and engineering teams.
• Represent Product Security with customers, security researchers, certification bodies, and other external stakeholders when needed.

• 10+ years in product security, embedded systems security, security architecture, secure product engineering, or a closely related technical field.
• Demonstrated experience building, scaling, or significantly improving a product security program for connected devices or other products where security is critical.
• Principal architect, technical…