Supervisor, Product Security Test

Description

The Safety, Sensing and Industrial Components business of the company is hiring a Supervisor, Product Security Test.

The company is a global technology leader with more than 28,000 employees. It helps manufacturers become more productive, sustainable and agile, and its customers include food producers, global medicine suppliers, and businesses focused on clean water and green mobility.

You will lead a team that verifies and validates security in industrial control system (ICS) products, embedded devices, industrial software and communication technologies.

Your work combines people leadership with technical oversight of penetration testing, vulnerability assessment, fuzz testing, security automation and product security research.

You will sit in the engineering organization, grow a team of security test engineers, and work with product development, architecture and cybersecurity groups to strengthen product security across the full product lifecycle.

You will report to the Senior Manager of Development Test Engineering.

Responsibilities

• Lead and grow a team of Product Security Test Engineers.
• Oversee penetration testing, vulnerability assessments, fuzz testing, security feature validation and security research.
• Guide planning, priorities and execution of security testing across several product development programs.
• Make sure test plans, test cases and results trace back to product security requirements and applicable standards.
• Work with product development, architecture, quality and cybersecurity teams to build security into each stage of the product lifecycle.
• Handle hiring, onboarding, performance reviews and professional development for your team.
• Direct the building of security test tools, automation frameworks, test environments and methods.
• Present security findings, risks and recommendations to engineering and business leaders.
• Encourage technical excellence, teamwork, continuous improvement and new ideas.
• Keep up with emerging cyber threats, vulnerabilities, tools and industry practices.

Requirements

• Hold a bachelor's degree or equivalent relevant work experience.
• Be legally authorized to work in the US.
• Travel when needed, including internationally, for up to 10% of your time.
• Preferred: Typically 2+ years of experience in people leadership, supervision or engineering management.
• Preferred: Background in product security, security testing, embedded-system testing, embedded firmware or software engineering, test engineering, or a related technical field.
• Preferred: Degree in computer science, computer engineering, cybersecurity, electrical engineering or a related technical field.
• Preferred: Hands-on work with penetration testing, vulnerability assessment, security verification and validation, or related product security activities.
• Preferred: Experience planning complex engineering work, including estimates, schedules, resource plans and project commitments.
• Preferred: Track record of developing engineers with different experience levels and specialties.
• Preferred: Working knowledge of security testing for embedded products, software, communication protocols, networks or industrial automation systems.
• Preferred: Understanding of networking basics, including OSI and TCP/IP.
• Preferred: Experience with scripting or development languages such as Python.
• Preferred: Strong leadership, communication, project planning and problem-solving skills.
• Preferred: Ability to work with teams across the globe.
• Preferred: Experience leading cybersecurity, penetration testing or product security teams.
• Preferred: Experience performing or leading security assessments of industrial control system products, embedded devices, firmware, industrial software or communication protocols.
• Preferred: Familiarity with hardware debugging and embedded interfaces such as UART, SPI, I2C, JTAG or SWD.
• Preferred: Knowledge of cryptographic principles and experience validating cryptographic implementations.
• Preferred: Experience with industrial automation products, embedded systems or industrial protocols such as EtherNet/IP, CIP, IO-Link, Modbus or PROFINET.
• Preferred: Familiarity with security tools such as Burp Suite, Nmap, Wireshark and fuzzing frameworks.
• Preferred: Experience with CI/CD, test automation, DevOps or security automation practices.
• Preferred: Industry certifications such as OSCP, GPEN, CEH or similar.
• Preferred: Experience with vulnerability research, reverse engineering or published security findings.

Conditions

Hybrid setup: you are expected to work at a company location on Mondays, Tuesdays and Thursdays, unless a business obligation takes you elsewhere.

The company is an equal opportunity employer that includes disability and veteran status.

The company will not sponsor visas for this role, now or in the future.

Benefits

• Medical, dental and vision health insurance.
• 401k plan.
• Paid time off.
• Leave for parents and caregivers.
• Schedule flexibility, arranged with your manager to fit your personal life.