Information Security Engineer, Advanced

Zebra Technologies•Holtsville, NY

2d•Hybrid

About The Position

Zebra Technologies is seeking an experienced Product Security Advanced Engineer to join our growing Product & Solution Security team. This role is a senior-level individual contributor position, designed for a highly skilled professional who will partner directly with our product development teams to proactively reduce security risk across the product portfolio Zebra delivers to customers. This position sits above the Senior Engineer level and below Principal, with responsibilities that span technical execution, process optimization, and cross-functional collaboration.

Requirements

Bachelor’s degree required
8+ years of experience
Cyber Security experience
Vulnerability management experience
Tooling management (implementation & troubleshooting) experience
Software development experience (coding) experience

Nice To Haves

Master's degree beneficial
Experience working cross functionally
Team player
Proven ability to adjust to changes in priorities and manage multiple threads effectively and in a timely manner
Demonstrated examples as a team player with ability to navigate organizational boundaries
Strong verbal and written communication skills with a high attention to detail

Responsibilities

Executes security controls, defenses and countermeasures to intercept and prevent internal or external attacks or attempts to infiltrate company email, data, e-commerce and complex web-based systems.
Creates successful efforts to compromise systems security and designs countermeasures.
Manages audits hardware, software and network firewalls and encryption protocols.
Manages security policies to control physical and virtual access to systems.
Executes highly important information to management regarding the negative impact on the business caused by theft, destruction, alteration or denial of access to information and systems.
Internal or external, client-focused, working in conjunction with Professional Services and outsourcing functions.
Secure Software Development Leadership: Partner with development teams to implement and evolve secure development practices across diverse tech stacks and platforms.
Champion security “shift-left” strategies by embedding secure coding practices early in the software development lifecycle.
Drive adoption of secure coding standards and create reusable baselines across repositories.
Vulnerability & Secrets Management: Audit, assess, and drive remediation of vulnerabilities, with a particular focus on false positives and ignored issues.
Lead initiatives to identify and reduce secrets in code repositories, leveraging tools and automation wherever possible.
Tooling Ownership & Vendor Engagement: Serve as a Zebra representative on the Change Advisory Boards (CABs) for key security vendors.
Maximize value from security tools by ensuring proper integration, configuration, and feature adoption.
Deliver briefings and feature updates to internal teams to keep them informed and engaged with evolving tool capabilities.
CI/CD and Automation Integration: Design, assess, and enhance CI/CD pipelines with robust cybersecurity controls in mind.
Ensure security tools are effectively integrated into the software build and release process.
Asset & Policy Governance: Contribute to asset tagging strategies through the creation and management of custom properties for application and code assets.
Collaborate with the Policy & Governance team to update and author product development security policies.
Cross-Functional Influence: Communicate complex security concepts in a clear and effective manner to developers, leadership, and stakeholders.
Act as an internal consultant, trusted advisor, and technical mentor on application security best practices.