Product Security Engineer (4-10 yrs)

Job Description :

Product Security Engineer to help provide product security consultation to application and product development teams and the Product Security Center of Excellence. Be able to complete the different assigned activities with little oversight while reporting to Information Security Architecture group. Review the Product Security maturing strategy and control set apply it to multiple disparate teams with varying levels of development maturity.

Provide analysis of vulnerability testing, SCA and static analysis tooling and provide recommendations for remediation. Support development of product security processes and internal application security tooling, methods and procedures.

As a member of the Information Security Architecture team, you will contribute to the development and execution of the Information Security Architecture strategy and ensuring the strategy is fully aligned to deliver a secure transactional environment that provides business value. This position reports to the Senior Manager, Product Security.

Requirements :

- 5 years of experience in Information Security

- 2 years of experience in Product Security, Endpoint Security, Product Development Pipelines, Cloud Security, Application Security, Security Testing and/or similar area of security.

- Pragmatic, risk-based approach to security posture improvement

- CISSP, OSCP, CEH or other related Information Security certifications

- Bachelor's degree in Computer Science, Engineering, related field or equivalent work experience

- Good understanding of application security vulnerabilities and their mitigations

- Good understanding of security frameworks like NIST SSDF and NIST CSF

- Experience with implementing DevSecOps and maturing security in application and product development along with experience in vulnerability analysis from SCA and SAST tooling, or DAST and unit testing.

- Strong communication skills with all levels of an organization

- The ability to communicate and express complex ideas in terms others can understand and convey technical security decisions in terms of business outcomes.

- Ability to think pragmatically about risk and it's relationship to security vulnerabilities.

- Experience with IoT security architecture or industrial IoT

- Experience working as part of cross-functional team to implement technology and security solutions