Engineering Manager – Product Security – Software Supply Chain

Schweitzer Engineering Laboratories•Boise, ID

About The Position

The objective of R&D Product Security is to reduce the likelihood and potential impact of a cybersecurity incident on SEL and our customers over the next 5 years. Without cybersecurity, all three tenets of the SEL mission statement are imperiled: Making Electric Power Safer, More Reliable, and More Economical. The strategic pursuit of World-Class Product Security practices is a critical need for SEL and our customers in rising to the challenge of a rapidly evolving security landscape. To meet this need, R&D Product Security is expanding our team of experts to equip our product teams and oversee cybersecurity programs. We are seeking a passionate, seasoned leader to oversee the processes, tools, and systems that govern and manage the SEL Software Supply chain and automated security testing. This is a high-impact role, contributing to large corporate initiatives such as complying with the EU Cyber Resilience Act and improving the robustness of our Secure SDLC. You will lead, supervise, and grow a team of security-minded software engineers to deliver these outcomes. In this role, you will design and develop enterprise-grade approaches and best practices that enable SEL to deploy and demonstrate world-class management of its third-party and first-party firmware and software. This includes defining and governing our processes related to selecting components, ensuring secure provenance of components that we ingest, managing Software Bills of Materials, and managing licenses and risks associated with those components. This will also include defining programs for strengthening relationships with key vendors and sponsorship and/or contribution to key open-source projects. You will also oversee the SEL approach to programming languages and automated security QA, such as automated coding standards, linting, fuzzing and static analysis, that complement our software ingestion processes. You will identify best-in-class tools (as well as AI-driven approaches) and work with the Secure SDLC Automation, DevTools, and product teams to implement solutions and drive improved, efficient security outcomes. You will serve as a trusted advisor and consultant for product teams, ensuring that SEL continues to excel at delivering products with world-class security!

Requirements

B.S. degree in Computer Science or equivalent experience.
8+ years software product development experience across the full Secure SDLC, including at least one of the following areas: Embedded development, Cloud-native development, Web development
3+ years of experience with technical leadership in software development.
Demonstrated proficiency with multiple programming languages
Demonstrated experience with software supply chain practices and tools
Excellent leadership and communication skills
Ability to learn new skills and assume new responsibilities
Willingness to travel occasionally (< 10%)

Nice To Haves

Experience with hiring, supervising, and growing a team
Experience with using AI effectively in the SDLC.
Experience with contributing to open-source projects.
Knowledge of vulnerability management and disclosure practices
Knowledge of cybersecurity risk assessment practices
Knowledge of IEC 62443-4-1 and the Cyber Resilience Act

Responsibilities

Oversee and improve product security programs related to the SEL software supply chain and relevant standards and regulations (such as 62443-4-1 and the Cyber Resilience Act).
Oversee the definition, selection, deployment, and associated product outcomes for automated security QA processes and tools.
Maintain awareness of developing trends, technologies, and threats related to the secure SDLC.
Supervise, lead, mentor, and grow a team of software engineers.
Represent SEL at software industry conferences as needed.
Model, teach, and apply SEL values and the Principles of Operations.

Benefits

Competitive pay.
Superior benefits.
Inspiring work.
100% employee owned.
Retirement benefits include an employer funded stock ownership plan (ESOP) and personal 401(k) options.
Top tier medical, prescription, dental, vision, life, and disability insurance.
10 paid holidays, annual vacation accrual starting at 12 days, 9 paid sick days, and paid family and medical leave that covers 90% of your pay.
Fostering growth and development of our employees through avenues such as STEM courses, apprenticeships, tuition assistance, and engineering development programs.
Wellness benefits
Fertility benefits
Adoption benefits
Flexible spending benefits.