Lead Product Security Architect

Sprinklr is the definitive, AI-native platform for Unified Customer Experience Management (Unified-CXM), empowering brands to deliver extraordinary experiences at scale — across every customer touchpoint. By combining human instinct with the speed and efficiency of AI, Sprinklr helps brands earn trust and loyalty through personalized, seamless, and efficient customer interactions. Sprinklr’s unified platform provides powerful solutions for every customer-facing team — spanning social media management, marketing, advertising, customer feedback, and omnichannel contact center management — enabling enterprises to unify data, break down silos, and act on real-time insights. Today, 1,900+ enterprises and 60% of the Fortune 100 rely on Sprinklr to help them deliver consistent, trusted customer experiences worldwide. Job Description Job Description: As Product Security Architect - Lead, you will: Define, own, and continuously evolve Sprinklr's cloud and product security strategy across AWS, Azure, and GCP environments. Establish security baselines, reference architectures, guardrails, and security standards for cloud-native services, infrastructure, platforms, and product deployments. Lead strategic security initiatives from concept through execution, including defining success criteria, measurable outcomes, timelines, dependencies, and executive reporting. Operationalize security roadmaps aligned with business objectives, engineering priorities, regulatory

requirements, and emerging threats. Drive the evolution of Sprinklr's Secure Software Development Lifecycle (SSDLC) by embedding security controls throughout design, development, deployment, and operational processes. Serve as the security architecture lead for complex cloud initiatives, providing guidance and risk-based decision support to Engineering, DevOps, Platform, and Product teams. Review and assess cloud architectures, network designs, IAM implementations, data flows, and infrastructure deployments to ensure alignment with security standards and best practices. Lead Cloud threat modeling, architecture reviews, Network penetration testing programs, and security assessments for critical services and infrastructure. Define and champion a Policy-as-Code, Security-as-Code, and Infrastructure-as-Code strategy, enabling automated enforcement of security controls across cloud environments and CI/CD pipelines. Identify opportunities to leverage automation, AI, and security engineering practices to improve security coverage, reduce operational overhead, and accelerate developer adoption. Establish security metrics, Key Performance Indicators (KPIs), and Key Risk Indicators (KRIs) to measure program effectiveness, security posture improvements, risk reduction, and engineering adoption. Own security initiatives involving vulnerability management, cloud hardening, attack surface reduction, DDoS resilience, identity security, infrastructure protection, and cloud governance. Partner with Engineering, R&D, Product Management, Legal, Compliance, and Executive Leadership to prioritize security investments and drive remediation programs to completion. Influence technical direction across multiple teams and act as a trusted advisor for cloud security, infrastructure security, and security engineering decisions. Mentor and develop security engineers while fostering a culture of ownership, accountability, and continuous improvement. Communicate security risks, trends, metrics, and strategic recommendations to both technical and executive audiences. Participate in incident response, security investigations, and high-priority security events when required. Required Skills: Must have Knowledge about storage, compute, DNS and network services in AWS, Azure and/or GCP Knowledge about securing cloud services - (VPC/VNET, S3 or similar, Cloud Network Security, IAM, Logging and Auditing in Cloud, DNS, SMTP and Datastores) Knowledge about cloud agnostic & cloud specific security services offerings Knowledge about CIS benchmarks and security controls for Cloud service providers, Operating systems, Kubernetes, Docker and Server software technologies Knowledge about Disaster Recovery, High Availability and Encryption in Cloud Experience working with Version Control Tools: Gitlab / Github Experience working with Continuous Integration Tools: Jenkins, Airflow Experience working with Continuous Deployment Tools: Chef, Ansible, Helm Infrastructure as Code: Terraform, AWS Cloud Formation Basic knowledge of Kubernetes administration and security Docker concepts Operating Systems: Linux, MacOS, Windows Data Lakes: Snowflake or BigQuery API Tools: Postman Any of these Scripting Languages: Python / shell / SQL / JavaScript Excellent communication skills Experience in understanding vulnerabilities, triaging them and providing remediation guidance to development Experience building AI Assisted or Agentic workflows Experience Required: 10+ Years Required Educational Qualification: BE/ B.Tech Good to have Experience with CNAPP, CSPM, CWPP, CIEM, DSPM, KSPM, IaC Scanning and Vulnerability Management solutions Application Security: OWASP, Secure coding practices, vulnerability scanning, penetration testing Collaboration and Communication: Agile, Scrum, Jira, Confluence We focus on our mission: Sprinklr was founded in 2009 to solve a big problem: growing enterprise complexity that separated brands from their customers. Our vision was clear: to unify fragmented teams, tools and data — helping large organizations build deeper, more meaningful connections with the people they serve. Today, Sprinklr has a unified, AI-native platform for four product suites: Sprinklr Service, Sprinklr Social, Sprinklr Marketing, and Sprinklr Insights. Sprinklr is here to do three things: Lead a new category of enterprise software that we call Unified-CXM. Empower companies to deliver next generation, unified engagement journeys that reimagine the customer experience. Create a culture of customer obsession, with trust, teamwork, and accountability. We believe in our product: Customers who value exceptional customer experiences have what they need on our single unified platform, built with an operating system approach on a single codebase. That means that everything — and everyone — can work together to service, respond, sell, and market to customers on the channels they prefer. While Unified Customer Experience Management (Unified-CXM) as a category is just getting started, we are well on our way to creating a no-compromise, unified approach to better customer experiences for the world’s leading enterprise brands. We invest in our people: We offer a comprehensive suite of