AI Product Security Manager

Thomson Reuters

. Lead a team of senior security engineers within Thomson Reuters' Product Security function .

Posted 10/6/2026full-timeToronto • CanadaSeniorLead💰 CA$140,000 - CA$175,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in leading security engineering teams and driving the Secure Software Development Lifecycle (S-SDLC) while ensuring compliance and risk management. Proficient in security tooling integration, threat modeling, and secure coding practices to enhance product security across engineering workflows.

Highest-signal resume keywords

Product Security LeadershipSecure Software Development Lifecycle (S-SDLC)Security Tooling IntegrationThreat ModelingCloud Security (AWS, Azure, GCP)

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Application SecuritySoftware Security EngineeringSecure DesignVulnerability RemediationSecurity TestingCode ReviewSoftware Supply Chain SecurityCI/CD SecuritySecurity Data AnalyticsAI Security

Soft Skills

CoachingCommunicationTeam DevelopmentCollaborationFeedback

Tools & Technologies

SASTSCADASTAPIsContainers

Industry Keywords

Risk ManagementComplianceSecurity PoliciesEngineering GuidanceSecure Configuration

Tech Stack

Tools & technologies

AWSAzureCloudGoogle Cloud PlatformSDLC

About the role

Key responsibilities & impact

Lead a team of senior security engineers within Thomson Reuters' Product Security function
Shape the direction of the Product Security program and drive execution, improvement, and scaling of the Secure Software Development Lifecycle (S-SDLC)
Own the team's roadmap and delivery, aligning priorities with Product Security leadership and evolving risks and engineering needs
Lead and develop the team through coaching, feedback, recruitment, and retention
Challenge designs, guide difficult trade-offs, and contribute directly to technical work
Improve threat modelling, secure code review, security testing, vulnerability remediation, and software supply chain security practices
Lead security education and champion initiatives across the organization
Guide development and operation of security tooling and analytics embedded in engineering platforms and workflows
Help teams identify and prioritize risk, act on findings, and measure security practice effectiveness and adoption
Contribute to the Secure AI program, securing customer-facing and internal AI systems from design reviews through runtime safeguards
Guide AI agents and automation for threat modelling, security testing, and remediation
Collaborate with Product Engineering, Platform Engineering, Security Architecture, Risk and Compliance, and other Information Security & Risk Management functions
Improve security policies and standards and translate requirements into actionable guidance and reusable engineering patterns
Support product portfolio compliance and explain technical risks in terms of business impact to senior engineering and product leaders

Requirements

What you’ll need

Bachelor's degree in computer science, or equivalent practical experience
8+ years of experience in product security, application security, or software security engineering
Proven experience managing or leading senior engineers, including coaching, career development, prioritization, and delivery
Strong software engineering and security foundations
Excellent written and verbal communication skills
Experience delivering and improving S-SDLC practices across engineering teams, including secure design, threat modeling, code reviews, security testing, and vulnerability remediation
Experience with at least one major cloud provider (AWS, Azure, or GCP), including identity, networking, and secure configuration
Familiarity with containers
Experience building and integrating security tooling, APIs, and automation into developer workflows, including SAST, SCA, and DAST
Understanding of software supply chain security and secure CI/CD, including dependency management, build integrity, and artifact integrity
Experience using security data and analytics to prioritize risk, guide remediation, and measure effectiveness and adoption of security practices
Experience translating security policies, standards, and applicable compliance requirements into practical engineering guidance and controls
Working knowledge of AI and agentic system security, including prompt injection, model and data integrity, and controls for agent and tool use

Benefits

Comp & perks

Hybrid work model
Flexible work arrangements, including work from anywhere for up to 8 weeks per year
Flexible vacation
Two company-wide Mental Health Days off
Access to the Headspace app
Retirement savings
Tuition reimbursement
Employee incentive programs
Resources for mental, physical, and financial wellbeing
Two paid volunteer days off annually
Opportunities to get involved with pro-bono consulting projects and Environmental, Social, and Governance (ESG) initiatives
Annual Bonus based on a combination of enterprise and individual performance may be available