Synchrony
AVP, Product Security Architect
Full details on LinkedIn
The complete job description, requirements, and application details are available on the original posting.
About Synchrony
Synchrony Financial is a prominent consumer financial services company that offers digitally-enabled financing solutions across various industries, including retail, health and wellness, telecommunications, and more. Established in 1932 and originally part of General Electric, Synchrony became an independent public company in 2015. It is headquartered in the United States and is recognized for its significant growth, with a reported annual purchase volume of $185 billion and over $70 billion in bank deposits. The company provides a range of financial products and services, including private-label credit cards, revolving credit, and specialized financing through its key segments: Retail Card, Payment Solutions, and CareCredit. Synchrony emphasizes innovation, investing over $5 billion in digital technology and holding 72 U.S. patents. It partners with more than 300,000 locations nationwide, focusing on enhancing customer experiences and promoting financial inclusion, including initiatives to support minority-owned businesses.
Security at Synchrony
Compiled from public job postings, careers pages, and company materials. Data may not reflect current state — verify during interviews.
Security Philosophy
- Synchrony's AppSec philosophy centers on 'shift-left security' and the creation of an 'Application Security Blueprint' consisting of reference architectures and engineering guardrails.
- Their stated mission involves using 'secure technology across our platforms' to ensure fraud protection and platform integrity.
Security Team
- Synchrony's security organization is led by CISO Karl Schimmeck.
- The Application Security function includes leadership roles such as Assistant Vice President of Application Security (Vandan J.) and Infosec Engineering leads (Jordan Berry).
- The team size is estimated at approximately 50 individuals based on public professional profile indices as of April 2026.
- Recent hiring activity includes roles for Product Security Architects and Cloud Security Architects focused on 'shift-left' methodologies.
Key Initiatives
- A primary current initiative is the definition of an 'Application Security Blueprint' to standardize reference architectures.
- Synchrony also maintains an active vulnerability intake process through 'Bug bounty acknowledgments.' The team is actively implementing 'shift-left security' practices to integrate security earlier in the development lifecycle.
Preparing for an AppSec interview?
Get the weekly briefing 2,000+ security pros trust.