Cyber Product Security Engineer, Lead

Toyota • Plano, TX

1d

About The Position

Toyota Financial Services (TFS) Technology is seeking a Cyber Product Security Engineer, Lead to support security initiatives throughout the product lifecycle. The role ensures products are designed, developed, and maintained according to strong security principles, partnering with product management, engineering, and security teams to embed security into product development, mitigate risks, and protect customers and company assets from evolving threats. It requires deep technical expertise in product security, leadership, and effective collaboration across functions.

The engineer safeguards product security posture throughout the software lifecycle and promotes rapid, resilient delivery of customer value. The role leads the use of threat modeling, secure design reviews, vulnerability assessments, and security testing; integrates security requirements and controls into the product development lifecycle; oversees security risk assessments and mitigation plans; and develops product security policies, standards, and best practices aligned with industry standards and regulatory requirements. The engineer also supports data-driven risk assessment and remediation using an Application Security Posture Management (ASPM) platform, coordinates application security incident response, and maintains product security documentation.

Toyota does not offer immigration-related employment visa or work authorization support or sponsorship for this role. Applicants must be authorized to work in the United States without Toyota sponsorship now or in the future.

Requirements

• Bachelor's degree in Computer Science, Information Security, or a related field.
• At least 8 years of extensive, progressive experience in application security, focused on secure software development practices and techniques.
• Strong understanding of web application security vulnerabilities and mitigation strategies, such as the OWASP Top 10.
• Proficiency in programming languages commonly used in web application development, such as Java, Python, or JavaScript.
• Excellent analytical and problem-solving skills, including the ability to analyze complex application security issues and recommend effective solutions.
• Strong leadership and communication skills, including the ability to collaborate across functions and communicate technical concepts to non-technical stakeholders.
• Must have the right to work in the United States without requiring Toyota immigration-related employment support or sponsorship now or in the future.

Nice To Haves

• Advanced degree preferred.
• Certifications such as CISSP, CSSLP, CEH, or similar are highly desirable.
• Experience with cloud security, containerization, and DevSecOps practices.
• Experience developing and implementing cybersecurity policies.
• Risk management experience in a regulated environment.
• Knowledge of cybersecurity regulations and laws.
• Cyber incident response experience.

Responsibilities

• Lead and collaborate with product engineering teams on secure development using threat modeling, secure design reviews, vulnerability assessments, and security testing.
• Work with product managers, engineers, and architects to integrate security requirements and controls into the product development lifecycle.
• Oversee security risk assessments and mitigation plans for new and existing products.
• Lead the design and implementation of product security policies, standards, and best practices aligned with industry standards and regulatory requirements.
• Assess product security posture across the software lifecycle to enable rapid, resilient delivery of value to customers.
• Partner with security architecture, application security, cyber defense, product, IT operations, risk, and governance teams to help ensure products are secure.
• Use data-driven practices, including an Application Security Posture Management (ASPM) platform, to continuously assess and prioritize risk remediation across applications, services, and pipelines.
• Monitor and analyze application security incidents and coordinate incident response and remediation as needed.
• Stay current with emerging threats, vulnerabilities, and product security industry trends.
• Develop and maintain documentation related to product security architecture, processes, and procedures.

Benefits

• Professional growth and development programs
• Tuition reimbursement
• Team Member Vehicle Purchase Discount
• Toyota Team Member Lease Vehicle Program (if applicable)
• Comprehensive health care and wellness plans for the entire family
• Toyota 401(k) Savings Plan with company match and annual retirement contribution (if applicable)
• Paid holidays and paid time off
• Referral services related to prenatal services, adoption, childcare, schools, and more
• Tax-advantaged accounts, including Health Savings Account, Health Care FSA, and Dependent Care FSA
• Relocation assistance (if applicable)

What This Job Offers

• Job Type: Full-time
• Career Level: Senior