Product Security Engineer

CFO Trane U.S. -CFO•Tyler, TX

4d•Hybrid

About The Position

The Residential HVAC team is adding a Product Security Engineering position to focus on embedded systems, services, applications and the associated product development processes used in residential HVAC controls and connected devices. In this position, you will work closely with other software, hardware and systems engineers to ensure best practices and technologies are incorporated into our products.

Requirements

Bachelor’s degree in computer science, software, computer or electrical engineering or related technical discipline required
Ability to work with a geographically distributed team with up to 15% travel
Excellent verbal and written communication skills
Minimum 8 years experience in microprocessor-based software design for embedded systems with cloud connectivity
Minimum 4 years experience working in a product security capacity

Responsibilities

Ensure appropriate secure product development activities are performed, i.e. architectural analysis, threat modeling, penetration testing, SAST/DAST/SCA/fuzz testing, etc.
Manage external vendors providing cybersecurity services.
Help define system and product requirements to minimize potential security risks
Lead and participate in incident response activities.
Lead tabletop exercises and Security Champions program.
Stay up to date on emerging security threats, trends and regulations to provide recommendations for improving the security of the company’s products.