Cyber Product Security Engineer, Lead

Toyota North America•Plano, TX

About The Position

Toyota Financial Services (TFS) is seeking a highly motivated Cyber Product Security Engineer to support security initiatives throughout the product lifecycle. The role ensures products are designed, developed, and maintained according to strong security principles, partnering with product management, engineering, and security teams to embed security into development, mitigate risks, and protect customers and company assets from evolving threats. It requires deep technical expertise in product, application, and cloud security, along with effective cross-functional collaboration.

Requirements

Bachelor's degree in Computer Science, Information Security, or a related field, or equivalent work experience.
At least 5 years of progressive experience in application or product security, focused on secure software development practices and techniques.
Strong understanding of web application security vulnerabilities and mitigation strategies, such as the OWASP Top 10.
Proficiency in web application development languages such as Java, Python, or JavaScript.
Strong analytical and problem-solving skills, including the ability to analyze complex application security issues and recommend effective solutions.
Strong communication skills and the ability to collaborate across teams and communicate technical concepts to non-technical stakeholders.

Nice To Haves

Certifications such as CISSP, CSSLP, CEH, or similar.
Experience with cloud security, containerization, AI platforms, and DevSecOps practices.
Experience developing and implementing cybersecurity policies.
Risk management experience in a regulated environment.
Knowledge of cybersecurity regulations and laws.
Cyber incident response experience.

Responsibilities

Collaborate with product engineering teams on secure development through threat modeling, secure design reviews, vulnerability assessments, and security testing.
Work with product managers, engineers, and architects to integrate security requirements and controls into the product development lifecycle.
Oversee security risk assessments and mitigation plans for new and existing products.
Help design and implement product security policies, standards, and best practices aligned with industry standards and regulatory requirements.
Maintain a comprehensive understanding of product security posture throughout the software lifecycle to support resilient delivery of customer value.
Partner with security architecture, application security, cyber defense, product, IT operations, risk, and governance teams to secure products.
Use data-driven practices, including an Application Security Posture Management (ASPM) platform, to assess and prioritize risk remediation across applications, services, and pipelines.
Monitor and analyze application-related security incidents and coordinate incident response and remediation as needed.
Stay current with emerging threats, vulnerabilities, and product security industry trends.
Develop and maintain product security architecture, process, and procedure documentation.

Benefits

Professional growth and development programs
Tuition reimbursement
Team Member Vehicle Purchase Discount
Toyota Team Member Lease Vehicle Program (if applicable)
Comprehensive health care and wellness plans for the entire family
Toyota 401(k) Savings Plan with company match and an annual retirement contribution, whether or not the employee contributes (if applicable)
Paid holidays and paid time off
Referral services related to prenatal services, adoption, childcare, schools, and more
Tax-advantaged accounts, including Health Savings Account, Health Care FSA, and Dependent Care FSA
Relocation assistance (if applicable)