Impress employers and recruiters.
Choose from hundreds of resume examples.

Target Resume Now

About the Role

Lead a senior team building the platforms, programs, and tooling that secure Thomson Reuters' products end-to-end. Own the Secure Software Development Lifecycle, including threat modeling, security testing, software supply chain integrity, vulnerability identification and remediation, and secure design patterns. Lead the Secure AI program for AI-powered features, including review, red-teaming, and production protection. Partner with product engineering, platform engineering, Security Architecture, GRC, IAM, Detection & Response, and business leaders to make security a seamless developer experience through self-service tools, automation, APIs, and AI-powered security capabilities.

Responsibilities

Lead and grow the Product Security team, managing, coaching, and developing a team of senior Product Security Engineers covering the full Secure SDLC across Thomson Reuters' product portfolio.
Own and execute the Product Security program, including threat modeling, secure design, secure code reviews, security testing, software supply chain security, and vulnerability remediation across multiple products and cloud platforms.
Lead Secure AI for products, defining how Thomson Reuters secures AI-powered customer features through Secure AI design reviews, AI red teaming, runtime protections, and actionable security patterns.
Build and operate security automation and AI-enabled capabilities, including automated threat modeling, AI remediation agents, LLM security testing, and MCP-based capabilities for engineering teams.
Scale security as a developer experience by delivering self-service security tooling, APIs, CI/CD-native controls, clear standards, implementation guidance, and security champion programs.
Operate a security data and analytics layer that supports risk-based prioritization and measurable security outcomes across the enterprise.
Partner across security, engineering, and the business to align priorities, support compliance requirements, and translate technical risk into business impact for senior leaders.

Requirements

8+ years of experience in product security, application security, or software security engineering, including experience leading or managing senior security engineers.
Demonstrated ownership of a Secure SDLC program across a multi-product engineering organization, including threat modeling, secure design, security testing, vulnerability management, and software supply chain security.
Hands-on experience with at least one major cloud platform, such as AWS, Azure, or Google Cloud, including identity, networking, secrets management, data protection, and logging.
Strong software engineering instincts, with the ability to read and write code in Python, Go, or similar languages and engage credibly with senior engineers on design and implementation.
Working knowledge of GenAI and LLM security, including prompt injection, model and data integrity, agent and tool-use security, and AI supply chain considerations.
Experience scaling security through developer-friendly tools, APIs, automation, self-service platforms, and CI/CD-native controls.
Excellent written and verbal communication skills, with the ability to influence senior engineering leaders and translate technical risk into business decisions.

Skills

Python
Go
GenAI
LLM security
Prompt injection
Model and data integrity
Agent and tool-use security
AI supply chain considerations
Cloud platform security
Identity management
Networking security
Secrets management
Data protection
Logging
Secure SDLC
Threat modeling
Secure design
Security testing
Vulnerability management
Software supply chain security
Developer tooling
APIs
Automation
Self-service platforms
CI/CD controls

Location

Toronto

Work Type

Hybrid

Experience Level

Manager
8+ years of experience

Salary/Compensations

140,000 CAD - 175,000 CAD

Benefits

Flexible vacation
Two company-wide Mental Health Days off
Access to the Headspace app
Retirement savings
Tuition reimbursement
Employee incentive programs
Resources for mental, physical, and financial wellbeing
Work from anywhere for up to 8 weeks per year
Two paid volunteer days off annually

About the Company

Thomson Reuters informs the way forward by bringing together the trusted content and technology that people and organizations need to make the right decisions.
We serve professionals across legal, tax, accounting, compliance, government, and media.
Our products combine highly specialized software and insights to empower professionals with the data, intelligence, and solutions needed to make informed decisions, and to help institutions in their pursuit of justice, truth, and transparency.
Reuters, part of Thomson Reuters, is a world leading provider of trusted journalism and news.
We are powered by the talents of 26,000 employees across more than 70 countries, where everyone has a chance to contribute and grow professionally in flexible work environments.
At a time when objectivity, accuracy, fairness, and transparency are under attack, we consider it our duty to pursue them.
We are one of the few companies globally that helps its customers pursue justice, truth, and transparency.
Together, with the professionals and institutions we serve, we help uphold the rule of law, turn the wheels of commerce, catch bad actors, report the facts, and provide trusted, unbiased information to people all over the world.

Equal Opportunity

As a global business, we rely on the unique backgrounds, perspectives, and experiences of all employees to deliver on our business goals.
To ensure we can do that, we seek talented, qualified employees in all our operations around the world regardless of race, color, sex/gender, including pregnancy, gender identity and expression, national origin, religion, sexual orientation, disability, age, marital status, citizen status, veteran status, or any other protected classification under applicable law.
Thomson Reuters is proud to be an Equal Employment Opportunity Employer providing a drug-free workplace.
We also make reasonable accommodations for qualified individuals with disabilities and for sincerely held religious beliefs in accordance with applicable law.