Product Security Architect

Role Overview

At Hilti, the Product Security Architect enables innovation by ensuring digital products, AI-enabled solutions, and customer-facing platforms are secure, resilient, and trusted by design. You’ll support strategic initiatives across Strategic Marketing, partnering with business and technology teams to turn security challenges into practical solutions that accelerate delivery and create lasting customer value.

This full‑time position is available from November 1st 2026. Required travel is up to once, twice per year. 

What you’ll do

• Provide security architecture support and guidance for traditional and AI-enabled solutions, helping teams embed security, privacy, resilience, traceability, and human oversight from initial design through deployment and ongoing operation.
• Perform and support security architecture reviews, identify control and design gaps, assess technical and business risks, and recommend practical remediation, compensating controls, or risk-treatment options to the responsible decision-makers.
• Contribute to the development and maintenance of secure AI architecture and engineering patterns for models, RAG pipelines, vector stores, prompts, APIs, integrations, agent identities, memory, tool use, multi-agent workflows, and sensitive data flows, in alignment with standards and decisions established by the responsible HQ functions.
• Support the development, implementation, and ongoing improvement of architectural guardrails for reliable and safe operations, including least-privilege access, workload and agent identity, secrets management, data isolation, output validation, observability, auditability, and secure failure handling.
• Conduct threat modelling and security reviews of web, cloud, and AI solution designs, including higher-risk use cases, using recognised frameworks such as OWASP and MITRE ATLAS, and provide recommendations to the relevant solution owners and decision-makers.
• Assess and document the security implications of third-party models, AI platforms, plugins, connectors, MCP-based capabilities, external data sources, and autonomous or semi-autonomous agents. Provide findings and recommendations to the responsible stakeholders before integration decisions are taken.

• Support security operations, penetration testing, and incident response for traditional and AI-enabled systems. Identify architectural lessons and control gaps, and provide recommendations for improving architecture standards and design patterns. Participate in on-call incident support where required.
• Support responsible business and technology stakeholders in defining availability, disaster recovery, business continuity, backup, failover, and restoration requirements, based on critical business functions, AI service dependencies, and agreed recovery priorities.

What you’ll bring

• Thorough knowledge of cybersecurity and privacy principles, industry best practices, security protocols and standards, and experience applying them to requirements and system designs.
• Strong knowledge of GenAI and LLM security, secure AI architecture principles, and the security implications of models, data pipelines, RAG, orchestration layers, APIs, agents, tool use, and third-party AI services.
• Hands-on experience reviewing or designing AI-enabled solutions, identifying trust boundaries and data flows, and translating AI security risks into architecture requirements and technical controls.
• Thorough knowledge of cyber threats and system vulnerabilities, with experience conducting threat and risk assessments, penetration testing, vulnerability scans, and enterprise security reviews.
• Hands-on experience applying architecture methods and standards through frameworks such as TOGAF, Zachman, or DoDAF.
• Hands-on experience designing, securing, configuring, or reviewing cloud services, network infrastructure, security products, APIs, and integrations, with sufficient technical depth to engage credibly with engineers.
• Strong knowledge of identity and access controls including MFA, PKI, OAuth, OpenID, and SAML.

• Strong knowledge of cryptography, key management, networking concepts, and protocols.
• Working knowledge of GenAI and LLM security, secure AI architecture principles, agent and tool-use security, and frameworks such as OWASP and MITRE ATLAS.
• •Ability to translate technical design risk into clear decisions and guidance for engineering and product stakeholders.

What’s in it for you

Joining Hilti Digital & Marketing Services (HDMS) means becoming part of a modern, people‑centered workplace with benefits designed to help you thrive both professionally and personally, a truly international environment that values diverse perspectives, fuels innovation, and encourages cross‑cultural collaboration, supportive, close‑knit leadership offering clarity, coaching, , challenging responsibilities that strike the right balance between autonomy and teamwork, ownership of your career, giving you the freedom and support to shape your own development path, and also:

• Hybrid working model, with the option to work from home up to 50% of the time.
• Comprehensive health insurance fully covered for you and your family.
• Competitive pension scheme to support long term financial security.
• Annual Solidarity Day, allowing you to volunteer for social causes that matter to you.
• On‑site crèche facility (subject to availability) to support employees with young children.
• Legal assistance program (EKEI) providing guidance on various legal and administrative matters.

Why Hilti

Hilti is a global leader in construction innovation, with more than 34,000 team members across 120 countries. Guided by our purpose, Making Construction Better, we’re driven to keep learning, growing, and finding new ways to make a lasting impact. Here, you’ll be empowered to use your strengths, work with a global and inclusive team, and take on meaningful challenges. At Hilti, you’ll have the chance to make your ideas, achievements, and growth real through purpose, passion, and teamwork.

At Hilti Digital & Marketing Services (HDMS) in Paris, we bring together strategic marketing, data excellence, and digital capabilities to support Hilti’s global transformation. Our teams combine customer insights, analytics, content strategy, and digital platform activation to strengthen our brand and enhance the way we engage with customers worldwide. Working closely with global IT and business units, HDMS turns data, technology, and market intelligence into actionable strategies that shape Hilti’s future. Here, you’ll help make real impact through innovative digital marketing, customer‑centric design, and solutions that elevate productivity.