Lead Security Engineer

About the Role
In this role, you will provide software security test quality assurance support to software development teams. This position ensures that scrum teams adhere to the defined software security development lifecycle process and comply with related regulations and industry standards. As a member of the software test & QA department, you will collaborate with the team to implement continuous improvements to the software security process, monitor the health of deployed software systems, and guide scrum teams in their efforts. Your responsibility will be to ensure compliance with software security quality policies and procedures.

We work in a supportive environment where the team embraces new techniques to improve and grow its capabilities. We’re looking for someone who shares this ethic and has a desire to develop security test strategies across various platforms (Lighting, Environmental, Hair, and Robotics). You should have an awareness of software verification methodologies and techniques, ideally with a background in security testing, and be comfortable discussing high-level design with developers.

Key Responsibilities:

• Implement, test, and operate advanced software security techniques in compliance with technical reference architecture.
• Perform ongoing software security penetration testing and code review activities to improve software security, utilizing both automated and manual methods to identify and exploit vulnerabilities in IoT consumer products.
• Define penetration testing methodologies, utilizing a combination of automated and manual tools.
• Agree on the desired security level with the organization, reviewing requirements to build tests.
• Build automated systems to support continuous testing and analysis of nightly builds.
• Contribute to the design, development, implementation, and integration of Offensive Cyber Operations tools against various platforms, payloads, and systems.
• Proactively identify security risks and provide engineering designs for new software solutions to mitigate vulnerabilities.
• Work in a SAFe Agile team across a global organization.
• Consult team members on software secure coding practices.
• Develop familiarity with new tools and best practices.

Qualifications, Skills, and Behaviors:

• Relevant experience in cyber security, including penetration testing, security posture assessment, cloud security assessment, IoT security, vulnerability analysis, and risk assessment.
• Proficient in using scanning/attack/assessment tools and techniques.
• Competency in at least one scripting or coding language (e.g., Python, C, C++).
• In-depth understanding of wireless protocols (Wi-Fi, Bluetooth), JTAG, and USB.
• Proficient in security concepts for IoT, Linux, and RTOS operating systems.
• Familiarity with Test Management Systems such as Jira, Confluence, Stash, Git, and Bamboo.
• Ability to provide critical input at all stages of the design and development of new features.
• Persistent, inquisitive, and results-driven.
• Creative and capable of generating numerous concepts for new technologies.

Additional Requirements:

• Over 3 years of relevant experience in software quality or software testing.
• Bachelor’s Degree in Computer Engineering, Electronic Engineering, or a related field.
• Knowledge of software in IoT products, including embedded systems, apps, and cloud applications.
• Experience in a regulated environment (e.g., ISO, IEC, FDA standards).
• Familiarity with Agile software development and DevOps environments.
• Excellent attention to detail and strong communication skills, with the ability to work independently and as part of a team.
• Ability to thrive in a fast-paced environment and deliver high-quality results with minimal supervision.
• Strong understanding of the software security development lifecycle.
• Good understanding of statistical process control; ability to select, define, and apply product and process metrics and analytical techniques, and communicate results effectively.
• Advanced certification with CREST is preferred.