Principal C++ Security Systems Engineer - Enterprise Trust

**The Opportunity**The Creative Cloud Engineering organization is strengthening the security foundation for Photoshop and the broader Creative Cloud ecosystem. Photoshop is a large-scale, performance-critical C++ application with native code, third-party dependencies, plug-in surfaces, file-format parsers, cloud-connected workflows, and growing enterprise expectations around software transparency and product security.We are looking for a Principal C++ Security Systems Engineer to serve as the security champion for Photoshop. This role will define and drive the technical roadmap for memory safety, sandboxing, SBOM, dependency governance, secure build integrity, and enterprise security readiness.This is not a compliance-only role or a generic AppSec role. It is a hands-on Principal engineering role for someone who understands large C++ codebases, can reason about real product attack surfaces, and can partner deeply with engineering teams to make Photoshop more secure, resilient, and enterprise ready.**What You'll Do**Security Architecture & Technical Leadership - Serve as the principal security systems engineer and security champion for Photoshop - Define the security roadmap across native C++ code, file handling, extensibility, cloud-connected workflows, AI-enabled capabilities, and enterprise deployment scenarios - Partner with product engineering, platform security, legal, compliance, release, build, and enterprise teams to turn security requirements into durable engineering capabilities - Lead security design reviews for high-risk areas including parsers, plug-ins, scripting, extensibility, IPC, AI-enabled workflows, and customer data handling - Establish secure-by-design patterns that teams can adopt without slowing product velocity **Memory Safety & Code Hardening** - Drive a pragmatic memory safety roadmap for Photoshop’s large C++ codebase - Prioritize high-risk, attacker-reachable components such as image parsers, file-format decoders, font handling, color profiles, plug-in boundaries, native services, and IPC paths - Improve adoption of sanitizers, fuzzing, static analysis, compiler hardening, runtime mitigations, and safer C++ practices - Reduce vulnerability classes such as use-after-free, buffer overflows, type confusion, unsafe pointer usage, integer overflows, and unsafe deserialization - Evaluate when to use modern C++, Rust, process isolation, safer libraries, or targeted rewrites versus mitigation and containment - Build measurable security signals into CI/CD so regressions are caught earlier **Sandboxing, Isolation & Attack Surface Reduction** - Define sandboxing and isolation strategies for high-risk Photoshop execution surfaces - Improve security boundaries around file import/export, plug-ins, scripting, generative workflows, embedded services, and third-party integrations - Design privilege separation, process isolation, brokered access, secure IPC, and least-privilege boundaries - Partner across macOS, Windows, web, and cloud-connected surfaces to apply the right OS-level security controls - Reduce blast radius while balancing performance, compatibility, and professional workflow requirements **SBOM & Software Supply Chain Security** - Own the technical strategy for Photoshop SBOM generation, validation, accuracy, and release integration - Build reliable SBOM pipelines across first-party code, third-party libraries, open-source dependencies, native packages, build outputs, installers, and shipped artifacts - Integrate SBOMs into vulnerability detection, dependency policy enforcement, release readiness, and enterprise reporting - Improve dependency governance across open-source intake, version tracking, vulnerability response, license metadata, and end-of-life dependency removal - Drive secure build provenance, artifact signing, release integrity, and traceability across Photoshop delivery pipelines **Enterprise Security & Customer Trust** - Partner with enterprise security, field, compliance, and product…