Cyber Product Security Engineer, Lead

Toyota North America • Plano, TX

9d

About The Position

Toyota Financial Services (TFS) Technology is seeking a Cyber Product Security Engineer, Lead to support security initiatives throughout the product lifecycle. The role ensures products are designed, developed, and maintained with strong security principles, partnering with product management, engineering, and security teams to embed security into product development, mitigate risks, and protect customers and company assets from evolving threats. It calls for deep technical expertise in product security, leadership, and effective cross-functional collaboration.

The role safeguards product security across the software lifecycle and enables rapid, resilient delivery of customer value. It leads secure engineering practices, risk assessment and mitigation, security standards and policies, and the use of an Application Security Posture Management (ASPM) platform to continuously assess and prioritize remediation across applications, services, and pipelines. It also supports application security incident response, keeps current with emerging threats, and maintains product security documentation.

Requirements

• Bachelor's degree in Computer Science, Information Security, or a related field.
• At least 8 years of progressive experience in application security, focused on secure software development practices and techniques.
• Strong understanding of web application security vulnerabilities and mitigation strategies, such as the OWASP Top 10.
• Proficiency in web application development languages such as Java, Python, or JavaScript.
• Excellent analytical and problem-solving skills, including the ability to assess complex application security issues and recommend effective solutions.
• Strong leadership and communication skills, including the ability to collaborate across teams and explain technical concepts to non-technical stakeholders.
• Must have authorization to work in the United States without current or future Toyota immigration-related employment support or sponsorship.

Nice To Haves

• Advanced degree.
• Certifications such as CISSP, CSSLP, CEH, or similar.
• Experience with cloud security, containerization, and DevSecOps practices.
• Experience developing and implementing cybersecurity policies.
• Risk management experience in a regulated environment.
• Knowledge of cybersecurity regulations and laws.
• Cyber incident response experience.

Responsibilities

• Lead and collaborate with product engineering teams on secure development using threat modeling, secure design reviews, vulnerability assessments, and security testing.
• Work with product managers, engineers, and architects to integrate security requirements and controls into the product development lifecycle (PDLC).
• Oversee security risk assessments and mitigation plans for new and existing products.
• Lead the design and implementation of product security policies, standards, and best practices aligned with industry standards and regulatory requirements.
• Safeguard product security across every stage of the software lifecycle.
• Partner with security architecture, application security, cyber defense, product, IT operations, risk, and governance teams to ensure products are secure.
• Use data-driven practices, including an Application Security Posture Management (ASPM) platform, to continuously assess and prioritize risk remediation across applications, services, and pipelines.
• Monitor and analyze application-related security incidents and coordinate incident response and remediation as needed.
• Stay current with emerging threats, vulnerabilities, and product security trends.
• Develop and maintain product security architecture, process, and procedure documentation.

Benefits

• Professional growth and development programs
• Tuition reimbursement
• Team Member Vehicle Purchase Discount
• Toyota Team Member Lease Vehicle Program (if applicable)
• Comprehensive health care and wellness plans for the entire family
• Toyota 401(k) Savings Plan with company match and annual retirement contribution (if applicable)
• Paid holidays and paid time off
• Referral services related to prenatal services, adoption, childcare, schools, and more
• Tax-advantaged accounts, including Health Savings Account, Health Care FSA, and Dependent Care FSA
• Relocation assistance (if applicable)

What This Job Offers

• Job Type: Full-time
• Career Level: Senior