Product Security Specialist

Geotab • Atlanta, GA

10d • Hybrid

About The Position

Geotab is seeking a Product Security Specialist to perform security reviews of internal and external products, ranging from individual scanner findings to complex product architecture reviews. The role evaluates product security through source-code analysis, scanner tools, manual reviews, threat modeling, penetration testing, and simulated cyberattacks. The specialist also writes and maintains automation scripts, supports secure architecture and coding practices, and provides clear risk assessments and remediation guidance to developers, product owners, and management.

The position works closely with development teams, security operations, and global stakeholders to integrate security throughout the product lifecycle. Success requires technical depth across programming languages and security tools, strong analytical and communication skills, meticulous attention to detail, and the ability to manage changing priorities and multiple projects.

Geotab describes its working model as flexible hybrid, supporting both in-person and virtual work. Employees may work from home with a reliable internet connection and are welcome to use the company’s offices. Benefits listed apply to full-time permanent employees only.

Requirements

• 5–8 years of previous experience in security evaluation or analysis, security code reviews, or relevant development experience.
• Bachelor’s degree in Computer Science, Information Management, Engineering, or a related field, or an equivalent combination of education and work experience.
• Experience using source-code, dynamic, and dependency scanners, such as Veracode, Fortify, Sentinel, OWASP Dependency, NetSparker, or Qualys.
• Knowledge of programming languages including C, C#, .NET, Python, and JavaScript/TypeScript.
• Knowledge of web service technologies including XML, JSON, SOAP, and REST.
• Knowledge of dependency package managers such as npm and NuGet.
• Competency with Linux, Windows, GCE, Bash, and Python, and ability to rapidly acquire new programming languages.
• Excellent communication skills, accuracy, meticulous attention to detail, and ability to manage multiple tasks and projects simultaneously.
• Ability to work with changing priorities and communicate risk assessments to technical and non-technical audiences.

Nice To Haves

• Security certifications.
• Experience working in a technical or engineering high-technology industry.

Responsibilities

• Review existing, new, and proposed products using source-code, dynamic, and dependency scanners, manual code reviews, and security-focused architecture reviews.
• Manually validate scanner findings by tracing source code across applicable codebases and provide developers with remediation suggestions.
• Explain risk assessments to technical and non-technical audiences.
• Write and maintain Bash and Python scripts or code to prepare scan inputs, automate scanner execution, and integrate scanners with CI pipelines, Google Cloud storage, and reporting mechanisms.
• Update and refactor scanning scripts as needed.
• Contribute to secure coding standards, including developing secure coding training for current and future developers.
• Write assessment reports and vulnerability descriptions for product owners and developers.
• Support the design and implementation of secure product architectures and ensure robust security controls and compliance with industry standards.
• Conduct vulnerability assessments, penetration testing, and code reviews, and recommend product security improvements.
• Perform threat modeling to identify product security risks and vulnerabilities.
• Contribute to and sometimes lead initiatives to improve the security posture of products.
• Assess security coverage and recommend ways to address coverage gaps.
• Follow up thoroughly, prioritize work contributing to team objectives, and escalate issues promptly when needed.
• Monitor and respond to emerging threats and vulnerabilities relevant to products.
• Develop and maintain security automation scripts and tools to streamline security processes.
• Collaborate with development teams to integrate security practices throughout the product lifecycle and support security-by-design principles.
• Handle time-sensitive and confidential product vulnerability reports using technical expertise and communication skills.
• Support Geotab global strategic initiatives.

Benefits

• Flexible working arrangements.
• Baby bonus and parental leave top-up program.
• Online learning and networking opportunities.
• Electric vehicle purchase incentive program.
• Competitive medical and dental benefits.
• Retirement savings program.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior