Product Security Engineer Senior

Acuity Inc. (NYSE: AYI) is a market-leading industrial technology company. We use technology to solve problems in spaces, light and more things to come. Through our two business segments, Acuity Brands Lighting (ABL) and Acuity Intelligent Spaces (AIS), we design, manufacture, and bring to market products and services that make a valuable difference in people's lives.

We achieve growth through the development of innovative new products and services, including lighting, lighting controls, building management solutions, and an audio, video and control platform. We focus on customer outcomes and drive growth and productivity to increase market share and deliver superior returns. We look to aggressively deploy capital to grow the business and to enter attractive new verticals.

Acuity Inc. is based in Atlanta, Georgia, with operations across North America, Europe and Asia. The Company is powered by approximately 13,000 dedicated and talented associates. Visit us at www.acuityinc.com.

Job Summary

Acuity Brands is seeking a highly experienced and hands-on Security Architect to lead the design and implementation of secure architectures across our cloud-native platforms, connected products, and enterprise applications.

Key Tasks & Responsibilities (Essential Functions)

This role requires strong expertise in cloud security (Azure-first), CNAPP, and modern DevSecOps practices, with a focus on proactively reducing risk across infrastructure, workloads, and application pipelines. You will drive security across the full product lifecycle-embedding controls into architecture, development, and operations-while partnering closely with engineering, DevOps, and platform teams.

Skills and Minimum Experience Required

Cloud Security Architecture & CNAPP

• Lead secure design and architecture reviews for cloud-native and distributed systems, including IoT-integrated platforms

• Experience with leading CNAPP platforms such as Microsoft Defender for Cloud, Prisma Cloud, Wiz, Orca Security, or Lacework, including their use for posture management, workload protection, and identity risk analysis. Own and drive Cloud-Native Application Protection Platform (CNAPP) capabilities, including:

• CSPM (posture management and misconfiguration detection)

• CWPP (runtime protection for VMs, containers, serverless)

• CIEM (identity entitlement and least privilege enforcement)

• Kubernetes and container security (AKS, image hardening, runtime controls)

• Experience defining and enforcing cloud security guardrails, landing zone controls, and policy-as-code frameworks

• Define and enforce cloud security baselines, guardrails, and landing zone standards

• Assess and secure:

• AKS/Kubernetes environments

• Infrastructure-as-Code (Terraform, ARM, Bicep)

• Service-to-service and API communication patterns

DevSecOps & Automation

• Integrate security controls into CI/CD pipelines, enabling both shift-left and runtime security
• Drive adoption of:
• SAST, DAST, SCA Toolchain
• Container and IaC scanning
• Policy-as-code for scalable enforcement

Security Governance & Enablement

• Define and maintain cloud security standards, patterns, and reusable controls
• Drive continuous improvement in security posture and maturity across development teams
• Influence cross-functional teams to adopt secure-by-design and Zero Trust principles

Education:

Bachelor of Science in Computer Science or Information Technology

Preferred Skills and Experience

• Effectively document and communicate security assessment findings, recommendations, and remediation strategies to a diverse audience, including technical teams and non-technical business stakeholders, ensuring clarity and actionable guidance for all parties involved.
• Demonstrable ability to analyze business direction and problems, understand long term vision and risk in developing strategic technical solutions.
• Azure Security Certifications are a plus

We value diversity and are an equal opportunity employer.  All qualified applicants will be considered for employment without regards to race, color, age, gender, sexual orientation, gender identity and expression, ethnicity or national origin, disability, pregnancy, religion, covered veteran status, protected genetic information, or any other characteristic protected by law.

Please click here and here for more information.

Accommodation for Applicants with Disabilities:  As an equal opportunity employer, Acuity Inc. is committed to providing reasonable accommodations in its application process for qualified individuals with disabilities and disabled veterans. If you have difficulty using our online system due to a disability and need an accommodation, you may contact us at (770) 922-9000, select option 4.  Please clearly indicate what type of accommodation you are requesting and for what requisition.

Any unsolicited resumes sent to Acuity Inc. from a third party, such as an Agency recruiter, including unsolicited resumes sent to an Acuity Inc. mailing address, fax machine or email address, directly to Acuity Inc. employees, or to Acuity Inc. resume database will be considered Acuity Inc. property. Acuity Inc. will NOT pay a fee for any placement resulting from the receipt of an unsolicited resume.

Acuity Inc. will consider any candidate for whom an Agency has submitted an unsolicited resume to have been referred by the Agency free of any charges or fees. This includes any Agency that is an approved/engaged vendor, but does not have the appropriate approvals to be engaged on a search.

E-Verify Participation Poster

e-verify.gov

eeoc.gov