At a Glance
Logitech is the Sweet Spot for people who want their actions to have a positive global impact while having the flexibility to do it in their own way.
Logitech's product ecosystem spans embedded hardware, desktop software, and cloud services, and the security of everything we build sits at the heart of what this team does.
As a Product Security Architect, you will work across Logitech's full portfolio of internally built and self-hosted applications, providing security architecture guidance, threat modeling expertise, and hands-on consultancy to engineering teams throughout the product development lifecycle.
Your scope will deliberately span both product and enterprise software. Whether you are reviewing the secure design of a companion desktop application or advising on the authentication architecture of an internal enterprise service, you will be the security voice that engineering teams turn to before problems emerge.
You will work closely with Product Managers, Engineers, and fellow security team members, using a combination of deep technical expertise and modern AI-assisted tooling to embed security early and at scale across Logitech's engineering organization.
Define and own the secure architecture standards across Logitech's in-house built and self-hosted applications, spanning product ecosystems and enterprise services
Design secure communication pathways, trust boundaries, authentication frameworks, and cryptographic standards across our full software stack
Establish reusable, scalable security patterns that engineering teams can adopt without slowing down delivery
Lead threat modeling exercises across new and existing products, leveraging AI models to accelerate baseline generation and focusing your expertise on complex, Logitech-specific attack vectors
Identify architectural risks early in the SDLC and translate them into clear, prioritized, and actionable engineering requirements
Maintain a living view of our internal threat landscape and evolving attack surfaces, including AI-integrated product features
Serve as the trusted security partner for Product Managers, Lead Engineers, and Engineering Directors during ideation and design phases
Drive security reviews and design consultations across multiple product squads simultaneously, ensuring security remains an accelerator rather than a blocker
Define testing scopes and critical attack paths to guide offensive security and validation efforts
Act as the primary security authority for AI features being embedded into Logitech products and services — including on-device ML models, cloud-hosted LLM integrations, and AI data pipelines
Define security guardrails for generative AI integrations, covering risks such as prompt injection, insecure output handling, and training data exposure
6+ years in Application Security, Product Security, or Security Architecture roles covering a diverse and complex software portfolio
Demonstrated experience designing secure architectures across both product-facing and enterprise internal applications
Track record of influencing engineering culture and embedding security practices early in the development lifecycle
Deep expertise in threat modeling methodologies
Strong command of modern authentication and authorization protocols (OAuth 2.0, OIDC) and secure API design principles
Solid understanding of cryptographic fundamentals and their practical application in software systems
Familiarity with cloud-native security architectures (AWS, GCP, or Azure) and self-hosted infrastructure security
Working knowledge of secure SDLC frameworks (OWASP SAMM or equivalent)
Practical experience using AI and LLM tools to accelerate threat modeling, architecture reviews, or security research
Understanding of AI/ML security risks, including adversarial inputs, model extraction, prompt injection, and data pipeline security
Exceptional communication skills — you can speak to a firmware engineer and a VP of Engineering in the same day and be equally effective with both
Strong consultancy mindset: you influence without authority and build long-term trust with engineering teams
Across Logitech we empower collaboration and foster play. We help teams collaborate/learn from anywhere, without compromising on productivity or continuity so it should be no surprise that most of our jobs are open to work from home from most locations. Our hybrid work model allows some employees to work remotely while others work on-premises. Within this structure, you may have teams or departments split between working remotely and working in-house.
Logitech is an amazing place to work because it is full of authentic people who are inclusive by nature as well as by design. Being a global company, we value our diversity and celebrate all our differences. Don’t meet every single requirement? Not a problem. If you feel you are the right candidate for the opportunity, we strongly recommend that you apply. We want to meet you!
We offer comprehensive and competitive benefits packages and working environments that are designed to be flexible and help you to care for yourself and your loved ones, now and in the future. We believe that good health means more than getting medical care when you need it. Logitech supports a culture that encourages individuals to achieve good physical, financial, emotional, intellectual and social wellbeing so we all can create, achieve and enjoy more and support our families. We can’t wait to tell you more about them being that there are too many to list here and they vary based on location.
All qualified applicants will receive consideration for employment without regard to race, sex, age, color, religion, sexual orientation, gender identity, national origin, protected veteran status, or on the basis of disability.
If you require an accommodation to complete any part of the application process, are limited in the ability, are unable to access or use this online application process and need an alternative method for applying, you may contact us toll free at +1-510-713-4866 for assistance and we will get back to you as soon as possible.
Source: Logitech careers · View original posting
Logitech International S.A. is a leading global company based in Switzerland, specializing in the design and manufacturing of personal computer peripherals and digital devices. Founded in 1981, Logitech has grown significantly, becoming one of the largest manufacturers in its field. The company is known for its diverse range of products, including computer mice, keyboards, audio products, gaming accessories, webcams, and wireless devices. Logitech has established a strong presence in the market by transitioning from serving Original Equipment Manufacturers to focusing on retail consumers. This shift has allowed the company to enhance its brand and customer experience. With manufacturing facilities across multiple continents, including Switzerland, Taiwan, and China, Logitech continues to innovate and expand its product offerings, contributing to its robust financial performance.
Compiled from public job postings, careers pages, and company materials. Data may not reflect current state — verify during interviews.
Security Philosophy
“Logitech follows a "life-cycle approach"to security, emphasizing risk identification early in the design process and maintaining a "Security by Design"mindset. The philosophy centers on people and proactive risk management through a centralized review board. - Stated AppSec Mission: "committed to providing secure products and services"– Logitech Legal (https://www.logitech.com/en-us/legal/vulnerability-reporting), Legal Page. ⚠️ staleness flag. - Risk Philosophy: "We adopt a life-cycle approach to managing this risk."– Logitech Blog (https://www.logitech.com/blog/2023/07/17/product-security-at-logitech/), Corporate Blog. ⚠️ staleness flag. - Developer Enablement: "Champion 'Security by Design' by integrating secure development lifecycle practices"– Logitech Job Posting (Hitmarker), Job Board. ⚠️ staleness flag. - Gaps: Specific internal metrics for developer enablement or 'paved road' initiatives are not publicly available”
Security Team
Logitech's application and product security is governed by an internal Product Security Review Board (PSRB). The Head of Product Security reports directly to the Chief Information Security Officer (CISO) and leads a dedicated team alongside a global community of product security champions. Key leadership includes Tana Dubel as CISO. Practitioners identified include Principal and Product Security Engineers based in Switzerland and India. - Org Structure & Reporting Line: "The role is based in Lausanne, and reports to the CISO."– Logitech Job Posting (Hitmarker), Job Board. ⚠️ staleness flag. - Key Public-Facing Leaders: Tana Dubel, Chief Information Security Officer at Logitech – Global Cyber Conference (https://globalcyberconference.com/conference-speakers/tana-dubel/), Speaker Bio. ⚠️ staleness flag. - Active AppSec Job Postings (as_of:): 1 (Head of Product Security). - Common Skill/Tool Patterns: Emphasis on SAST, DAST, SCA, formal threat modeling, fuzzing, and cloud security. - Gaps: Total headcount and specific team-to-developer ratios are not publicly available
Key Initiatives
Logitech's primary AppSec initiatives include a formal Secure SDLC integrated with a Product Security Review Board and a public Bug Bounty program. They are also initiating "Safe AI by Design"practices. - Security Champions Program: Evidence Found. "leads a dedicated team and a community of product security champions across the globe."– Logitech Job Posting (Hitmarker), Job Board. ⚠️ staleness flag. - Vulnerability Management: "look forward to receiving your report through our HackerOne platform"– Logitech Legal (https://www.logitech.com/en-us/legal/vulnerability-reporting), Legal Page. ⚠️ staleness flag. - Secure SDLC Artifacts: "PSRB reviews and provides final approval on the security design for new products"– Logitech Blog (https://www.logitech.com/blog/2023/07/17/product-security-at-logitech/), Corporate Blog. ⚠️ staleness flag. - Recent Initiatives: "Safe AI by Design"– Logitech Job Posting (Hitmarker), Job Board. ⚠️ staleness flag. - Gaps: Detailed triage SLAs and MTTR targets are not publicly available
Preparing for an AppSec interview?
Get the weekly briefing 2,000+ security pros trust.
Interested in this role?
Apply on Logitech's site