Lead Product Security Engineer - Highland, United States - COX CORPORATE SERVICES INC.

Description

Highland, UT, United States 19936_R a6fa5cc88b8aa6a7dd84c90acc2e3a Cox Automotive The Lead Product Security Engineer holds an engineering leadership role that drives the development of process and automation solutions around our application security tools.

They will also guide technical and security engineering discussions within the team, and will be seen as an authority on secure coding, secure infrastructure, and secure design best practices.

They will help to imagine and shape the systems and process flows on incorporating security organically into the engineering teams' day to day workflows.

This engineer will work with AWS and other cloud technologies as well as a variety of commercial and open source security products and frameworks.

While this is an individual contributor role, you'll be involved in many aspects - help evolve our existing architecture, reduce complexity, work with engineering teams to improve operations, and implement and operationalization new security tooling, as needed.

Beyond automation of onboarding or usage of our application security tools, we strive for continuous improvement of processes and the integration of best practices.

We're looking for someone who has an interest in application security, cloud technologies and a passion to help the organization create secure-by-default world-class software.

• Reporting to the Product Security Director, serves as a member of the Product Security Engineering team
• Works with partner engineering teams to create applications and services that align to the Pproduct Ssecurity mission and goals and in order to create a paved road
• Leverages technology (tools, capabilities, processes) to level up software engineering teams' secure coding practices and knowledge
• Operationalizes off the shelf application security tools to help engineering teams build, deploy and deliver secure software
• Provide situational white glove service to critical business engineering teams
• Must be able to help engineering teams fix application security defects using a variety of technology stacks
• Promotes incorporation of security processes and practices to make security an organic part of a declarative pipeline model (e.g. CICD practices)
• Communicate process and tool automation improvements to the Product Owner and Product Manager, as opportunities and repeating concerns are observed
• Helps define the team's tasks and objectives, based on continuing analysis of service requests
• Creates automation solutions to support tool administration and operation
• Consistently exhibits a positive attitude and desire to help the team to succeed
• Design and build monitoring systems for developed automation applications and services
• Participate in On-call rotation with the team (once every 3-4 weeks)
• Consistently meets or exceeds predefined support and services Service Level Objectives (SLOs)
• Executes tasks with minimal supervision

• Bachelor's Degree; (preferably Computer Science or Cybersecurity) and 6 years' experience in a related field. The right candidate could also have a different combination, such as a master's degree and 4 years'; or a P.h.

All qualified applicants/employees will receive consideration for employment without regard to that individual's age, race, color, religion or creed, national origin or ancestry, sex (including pregnancy), sexual orientation, gender, gender identity, physical or mental disability, vete ran status, genetic information, ethnicity, citizenship, or any other characteristic protected by law.