Cyber Product Security Engineer, Lead

Toyota • Plano, TX

2d

About The Position

Toyota Financial Services (TFS) Technology is seeking a Cyber Product Security Engineer to support security initiatives across the product lifecycle. The role helps ensure products are designed, developed, and maintained according to strong security principles. It partners with product management, engineering, architecture, and security teams to incorporate security into product development, mitigate risks, and protect customers and company assets from evolving threats. The position calls for deep technical expertise in product, application, and cloud security, together with the ability to work effectively across teams.

The engineer helps safeguard products throughout the software lifecycle and supports secure, resilient delivery of value to customers. The role also advances data-driven application security practices, including introducing an Application Security Posture Management (ASPM) platform to assess security and prioritize risk remediation across applications, services, and pipelines.

Requirements

• Bachelor's degree in Computer Science, Information Security, or a related field, or equivalent work experience.
• At least 5 years of extensive and progressive experience in application or product security, focused on secure software development practices and techniques.
• Strong understanding of web application security vulnerabilities and mitigation strategies, such as the OWASP Top 10.
• Proficiency in programming languages commonly used in web application development, such as Java, Python, or JavaScript.
• Strong analytical and problem-solving skills, including the ability to analyze complex application security issues and recommend effective solutions.
• Strong communication skills and ability to collaborate with cross-functional teams and communicate technical concepts to non-technical stakeholders.
• Must be authorized to work in the United States without Toyota immigration-related employment support or sponsorship, now or in the future.

Nice To Haves

• Certifications such as CISSP, CSSLP, CEH, or similar.
• Experience with cloud security, containerization, AI platforms, and DevSecOps practices.
• Experience developing and implementing cybersecurity policies.
• Risk management experience in a regulated environment.
• Knowledge of cybersecurity regulations and laws.
• Cyber incident response experience.

Responsibilities

• Collaborate with product engineering teams on secure development using threat modeling, secure design reviews, vulnerability assessments, and security testing.
• Work with product managers, engineers, and architects to integrate security requirements and controls into the product development lifecycle (PDLC).
• Oversee security risk assessments and mitigation plans for new and existing products.
• Partner in designing and implementing product security policies, standards, and best practices aligned with industry standards and regulatory requirements.
• Assess product security posture across every stage of the software lifecycle to support rapid, resilient delivery of value to customers.
• Coordinate with security architecture, application security, cyber defense, product, IT operations, risk, and governance teams to ensure products are secure.
• Use data-driven practices, including an Application Security Posture Management (ASPM) platform, to continuously assess security and prioritize remediation across applications, services, and pipelines.
• Monitor and analyze application-related security incidents and coordinate incident response and remediation as needed.
• Stay current with emerging product security threats, vulnerabilities, and industry trends.
• Develop and maintain documentation for product security architecture, processes, and procedures.

Benefits

• Professional growth and development programs.
• Tuition reimbursement.
• Team Member Vehicle Purchase Discount.
• Toyota Team Member Lease Vehicle Program, if applicable.
• Comprehensive health care and wellness plans for the entire family.
• Toyota 401(k) Savings Plan with company match and an annual retirement contribution, if applicable.
• Paid holidays and paid time off.
• Referral services related to prenatal services, adoption, childcare, schools, and more.
• Tax-advantaged accounts, including Health Savings Account, Health Care FSA, and Dependent Care FSA.
• Relocation assistance, if applicable.
• Teamwork-, flexibility-, and respect-oriented work environment.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior