N
Product Security Lead
On-siteFull-timeSecurity Solutions EngineeringTransportation TechnologyEnterprise Software
Lead product security for a mobility platform spanning connected edge devices, cloud services, and applications. Set security standards, reduce product risk, and guide practical security improvements across engineering.
Responsibilities
- Own product security across edge devices, cloud services, and applications
- Set security strategy and standards based on product risk
- Lead security reviews from feature design through implementation
- Own secure development practices, dependency scanning, and secrets management
- Provide practical security guidance to engineering teams
- Lead vulnerability triage and coordinate remediation across research and development
- Maintain continuous product security assessments and a risk-ranked backlog
- Threat-model hardware deployed at customer intersections, including physical-access and long-lifecycle risks
- Manage external penetration-testing vendors and validate findings and remediation
- Manage SOC 2, ISO 27001, and future security certification requirements
- Apply AI-assisted analysis, automated triage, and agentic tools to expand security coverage
Requirements
- At least 8 years of information security experience, including at least 2 years leading application security
- Deep experience securing both cloud and IoT or edge-based products
- Hands-on experience using AI and agentic tools in security workflows
- Experience with SOC 2, ISO 27001, NIST, or comparable security frameworks
- Strong knowledge of network protocols
- Comfort working in Linux and with a scripting language such as Python
- Working knowledge of DevOps practices
Nice to have
- Experience securing critical infrastructure
- Familiarity with connected-vehicle or transportation security standards
- Background in offensive security or penetration testing
- Systems-level programming with C, C++, Go, or Rust