product security engineer

Boeing

<div><p>Hazelwood, Missouri; Saint Charles, Missouri; St Louis, Missouri; Berkeley, Missouri</p>
Job ID JR2026500796 Category Engineering - Product Security Role Type Onsite Post Date Apr. 10, 2026<p></p><div><br>
</div><div><p><b>Job Description</b></p><p>
At Boeing, we innovate and collaborate to make the world a better place. We&rsquo;re committed to fostering an environment for every teammate that&rsquo;s welcoming, respectful and inclusive, with great opportunity for professional growth. Find your future with us.</p><p>
The Boeing Company is looking for an <b>Experienced Product Security Engineer</b> to join the Government Vehicle Health Management Systems (GVHMS) team in <b>Hazelwood, MO</b>. This role will support a proprietary program as well as other platforms in the GVHMS portfolio within the Boeing Global Services (BGS) organization.</p><p>
In this role, you will work on our team of Product Security Engineers along with our internal team as well as external suppliers to ensure all stakeholders are meeting customer and internal CS/IA requirements. The CS/IA engineer will be required to assess compliance with CS/IA requirements, work with stakeholders to resolve compliance issues, and communicate status accordingly. This role will also be responsible for certifying compliance for the system and hardware assets as well as serving as a CS/IA focal on other efforts across the organization including requirements definition, issue remediation, as well as supporting Certification &amp; Accreditation (C&amp;A) activities for the team.</p><p>
Our amazing team of engineers develops, fields, and supports platform health management systems for the F/A-18, MQ-25, F-15, T-38, T-7, and proprietary platforms. Our software acquires and manages platform health and usage data, performs health, and usage assessment and recommends maintenance actions. We are tasked with the creation, design, development, modification, proof of concept, verification, testing, and demonstration of products and solutions to maximize platform mission readiness and effectiveness, reduce lifecycle costs, and keep our customers safe.</p><p>
At Boeing, we are all innovators on a mission to connect, protect, explore and inspire. From the seabed to outer space, you will learn and grow; contributing to work that shapes the world. Find your future with us.</p><p><b>
This position is expected to be 100% onsite. The selected candidate will be required to work onsite at one of the listed location options.
</b></p><p><b>Position Responsibilities:
</b></p><ul><li><p>Develops, implements, and sustains product security and resiliency throughout the requirements, design, build, test, production, operations, and support lifecycle</p></li><li><p>
Develops and enhances system requirements and architectures for product security to meet all applicable certification and customer requirements</p></li><li><p>
Ensures security of facilities, equipment, tools, data, networks, and resources used for product: design, development, build, test, storage, delivery, operations, and support</p></li><li><p>
Defines and identifies product security requirements for suppliers of components and subsystems for integration into Boeing products and services</p></li><li><p>
Coordinates with governments, customers, suppliers, and industry to identify risks and improve industry and regulatory security standards and requirements for programs and interfacing systems</p></li><li><p>
Conducts research and development activities resulting in innovative solutions</p></li><li><p>
Advises customers on maintaining product security and certification, including security consequences of modifying products and services</p></li></ul><p><b>
Basic Qualifications (Required Skills/Experience):</b></p><ul><li><p>
Bachelor Degree</p></li><li><p>
Ability to obtain a U.S. Security Clearance for which the U.S. Government requires U.S. Citizenship</p></li><li><p>
3+ years of experience in cyber-security, information assurance, or related field</p></li><li><p>
Experience interpreting and applying NIST requirements</p></li><li><p>
Certified Application Security Engineer (CASE), Security+, a CISSP certification, or equivalent Cyber Security certification (CISSP preferred)</p></li></ul><p><br>
<b>
Preferred Qualifications (Desired Skills/Experience):</b></p><ul><li><p>
Bachelor of Science degree from an accredited course of study in engineering, engineering technology (includes manufacturing engineering technology), chemistry, physics, mathematics, data science, or computer science</p></li><li><p>
5+ years experience with industry standard cybersecurity frameworks (NIST, OWASP, DFARS)</p></li><li><p>
5+ years of experience with security and vulnerability scanning tools such as ACAS/Nessus, STIG's, and SCC</p></li><li><p>
Experience identifying security vulnerabilities within source code</p></li><li><p>
5+ years of experience scanning source code with security tools Fortify and Coverity</p></li><li><p>
Software engineering or Information Technology (IT) experience, including knowledge of Microsoft operating systems and client-server and web-based architectures, is desirable</p></li><li><p>
Experience with the RMF or DIACAP process</p></li><li><p>
Experience interpreting and applying NIST requirements</p></li><li><p>
Experience with performing ACAS scans of systems and interpreting results</p></li><li><p>
Experience with STIGs and SCAP tool</p></li><li><p>
Experience with Vulnerator tool</p></li><li><p>
Experience with DISA IAVMS and patching to the notices</p></li></ul><p><b>
Drug Free Workplace:</b></p><p>
Boeing is a Drug Free Workplace where post offer applicants and employees are subject to testing for marijuana, cocaine, opioids, amphetamines, PCP, and alcohol when criteria is met as outlined in our policies.</p><p><b>
Travel:</b></p><p>
Less than 10%</p><p><b>
Pay &amp; Benefits:</b></p><p>
At Boeing, we strive to deliver a Total Rewards package that will attract, engage and retain the top talent. Elements of the Total Rewards package include competitive base pay and variable compensation opportunities.</p><p>
The Boeing Company also provides eligible employees with an opportunity to enroll in a variety of benefit programs, generally including health insurance, flexible spending accounts, health savings accounts, retirement savings plans, life and disability insurance programs, and a number of programs that provide for both paid and unpaid time away from work.</p><p>
The specific programs and options available to any given employee may vary depending on eligibility factors such as geographic location, date of hire, and the applicability of collective bargaining agreements.</p><p>
Pay is based upon candidate experience and qualifications, as well as market and business considerations.</p><p>
Summary Pay Range for Experienced level (Level 3): $128,350 - $173,650</p><p>
Potential signing bonus for eligible/qualified external candidates.</p><br>
<p>
Applications for this position will be accepted until <b>Apr. 15, 2026</b></p><br>
<p><b>
Export Control Requirements:
</b></p><p>This position must meet U.S. export control compliance requirements. To meet U.S. export control compliance requirements, a &ldquo;U.S. Person&rdquo; as defined by 22 C.F.R. &sect;120.62 is required. &ldquo;U.S. Person&rdquo; includes U.S. Citizen, U.S. National, lawful permanent resident, refugee, or asylee.</p><p><b>
Export Control Details:
</b></p><p>US based job, US Person required</p><p><b>
Education
</b></p><p>Bachelor's Degree or Equivalent Required</p><p><b>
Relocation
</b></p><p>This position offers relocation based on candidate eligibility.</p><p><b>
Security Clearance
</b></p><p>This position requires the ability to obtain a U.S. Security Clearance for which the U.S. Government requires U.S. Citizenship. An interim and/or final U.S. Secret Clearance Post-Start is required.</p><p><b>
Visa Sponsorship
</b></p><p>Employer will not sponsor applicants for employment visa status.</p><p><b>
Shift
</b></p><p>This position is for 1st shift</p><br>
<p><b>
Equal Opportunity Employer:</b></p><p>
Boeing is an Equal Opportunity Employer. Employment decisions are made without regard to race, color, religion, national origin, gender, sexual orientation, gender identity, age, physical or mental disability, genetic factors, military/veteran status or other characteristics protected by law.</p></div></div><p></p>
<br><div><h2 class="jobSectionHeader"><b>Your Benefits</b></h2>
<p>No matter where you are in life, our benefits help prepare you for the present and the future.</p>
<ul><li><div>Generous company match to your 401(k).</div></li>
<li><div>Industry-leading tuition assistance program pays your institution directly.</div></li>
<li><div>Fertility, adoption, and surrogacy benefits.</div></li>
<li><div>Up to $10,000 gift match when you support your favorite nonprofit organizations.</div></li></ul><br>
<p></p>
<p>These programs are subject to eligibility requirements and other conditions, which may differ for employees of certain subsidiaries or business units, or union-represented employees depending on bargaining agreement terms. If this information conflicts with the program documents, the latter shall control. This material is informational only.</p></div>

Experienced Product Security Engineer

Smart Tech Skills LLC

<div><div><div><b>Benefits:</b></div>
<ul><li>Competitive salary</li>
</ul></div><div><div><b>About the Role</b><br>
<br>
<b>Location:</b> Fully Remote (U.S.)<br>
<b>Start Date:</b> ASAP<br>
<b>Compensation:</b> Competitive / Market Rate<br>
</div><div>SMART TECH SKILLS is seeking a <b>Product &amp; Data Security Engineer</b> to help embed <b>Secure-by-Design</b> and <b>Privacy-by-Design</b> principles directly into the software development lifecycle (SDLC).<br>
</div><div>In this role, you will work closely with engineering teams to <b>automate application security and data protection controls through code</b>, ensuring security guardrails are enforced consistently via CI/CD pipelines and Git-based workflows. The environment is <b>Azure-native</b>, fully automated, and operates under a <b>GitOps model</b>&mdash;with no manual configuration or console-based security controls.<br>
</div><div>This is a hands-on engineering role for someone who enjoys building scalable security platforms, tooling, and guardrails that developers use by default.<br>
</div><div><b>Key Responsibilities</b><br>
</div><div>Secure SDLC Automation<br>
</div><ul><li>Design, implement, and maintain automated <b>SAST, SCA, and API security pipelines</b> using GitHub Actions or equivalent CI/CD tooling</li>
<li>Implement <b>policy-as-code</b> security gates to prevent insecure code from being merged or released</li>
<li>Ensure security controls are enforced automatically throughout the SDLC</li>
</ul><div>Data Loss Prevention (DLP) &amp; Privacy<br>
</div><ul><li>Implement <b>source-level detection of PHI, PII, and secrets</b> within CI/CD pipelines</li>
<li>Leverage regex-based and ML-based classifiers to identify sensitive data</li>
<li>Prevent sensitive data from entering source code repositories or build artifacts</li>
</ul><div>API &amp; Transport Security<br>
</div><ul><li>Define and enforce <b>Layer 7 security standards</b>, including:<ul>
<li>TLS 1.3 and HSTS</li>
<li>OAuth 2.0 / OIDC authentication flows</li>
<li>Secure JWT lifecycle management</li>
</ul></li><li>Implement and enforce <b>OpenAPI validation and linting policies</b>
</li></ul><div>Data Protection Engineering<br>
</div><ul><li>Develop reusable, secure-by-default libraries for:<ul>
<li>Application-layer encryption</li>
<li>Tokenization</li>
<li>Data redaction and masking</li>
</ul></li><li>Enable development teams with secure tooling that minimizes friction</li>
</ul><div>Software Supply Chain Security<br>
</div><ul><li>Generate <b>Software Bills of Materials (SBOMs)</b> for every build</li>
<li>Sign and attest to build artifacts</li>
<li>Enforce artifact provenance and integrity verification through CI/CD pipelines</li>
</ul><div>Required Qualifications<br>
</div><ul><li>5+ years of experience in <b>Application Security, Product Security, or Software Engineering</b>
</li><li>Strong hands-on experience with <b>CI/CD security automation</b>
</li><li>Experience using <b>GitHub Actions</b> or comparable CI/CD platforms</li>
<li>Proven experience implementing <b>secret detection and DLP tooling</b>
</li><li>Solid understanding of <b>API security</b>, OAuth 2.0, and OIDC frameworks</li>
<li>Strong programming skills in <b>Python, Go, or TypeScript</b>
</li></ul><div>Preferred Qualifications<br>
</div><ul><li>Experience building security automation in <b>GitOps-based environments</b>
</li><li>Azure-native cloud security experience</li>
<li>Experience designing or implementing <b>secure development frameworks</b> for enterprise applications</li>
<li>Familiarity with <b>AI-assisted or developer productivity security workflows</b>
</li></ul><div>Success Metrics<br>
</div><ul><li>90%+ of repositories protected by automated DLP and secret scanning</li>
<li>100% API compliance with standardized authentication and security patterns</li>
<li>Significant reduction in high and critical application-layer vulnerabilities</li>
</ul><div>Why Join SMART TECH SKILLS<br>
</div><ul><li>Work on modern, cloud-native security challenges at scale</li>
<li>Build security platforms that directly enable and protect developers</li>
<li>Collaborate with engineering teams focused on automation and quality</li>
<li>Fully remote role with long-term growth potential</li>
</ul>
</div><p>This is a remote position.</p></div>

Product & Data Security Engineer (AppSec, DLP & Privacy)

Goldman Sachs

<div>
 <strong>
  Job Description
  <br/>
  <br/>
 </strong>
 <strong>
  Role Overview
  <br/>
  <br/>
 </strong>
 The Lead Product Security Engineer position within the Asset and Wealth Management division and will be responsible for defining and evaluating solutions by closely working with the engineering teams to improve overall cybersecurity risk posture of the firm. This role is pivotal in balancing commercial objectives with robust security controls, ensuring the division's resilience against an evolving threat landscape, and protecting client assets and data.
 <br/>
 <br/>
 The objective is to foster a unified and proactive approach to risk management through early design review and penetration testing engagements with the engineering BU teams and enabling secure technological innovation across all Asset and Wealth Management initiatives.
 <br/>
 <br/>
 <strong>
  Key Responsibilities
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   This position is hands-on and requires close collaboration with Product Management, Engineering, Program Management, and Dev Ops teams.
  </li>
  <li>
   Responsible for security of applications (Cloud/Web/API/Mobile) managed by Asset and Wealth Management (AWM) in conjunction with centralized security teams
  </li>
  <li>
   Act as a security advisor to architects, developers, analysts and others to ensure we design confidentiality, integrity, resiliency, and privacy into the platform
  </li>
  <li>
   Partner with business units to understand requirements, design proposals and evaluate architectural flaws for various on-prem/cloud architectures
  </li>
  <li>
   Evaluate the effectiveness of existing key controls, identify gaps, and recommend improvements to mitigate risks and enhance firm&rsquo;s security posture
  </li>
  <li>
   Supervise, coach, and develop a small team of application security specialists
  </li>
  <li>
   Drive adoption of embedded application security controls as part of the Software Development Life Cycle (SDLC) in Agile methodology, including automated tools.
  </li>
  <li>
   Perform secure code reviews and facilitating or conducting penetration testing
  </li>
  <li>
   Assist in implementation of security related product features such authentication, cryptography, authorization, service integration, etc.
  </li>
  <li>
   Develop, maintain, and improve Technology Risk Program reflecting new emerging risks
  </li>
  <li>
   Enable the business to meet security requirements by design
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Skills And Experience Required
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   6 plus years' experience in secure architecture design, application security, and risk analysis techniques or related fields.
  </li>
  <li>
   Energetic, self-directed and self-motivated, able to build and sustain long-term relationships with colleagues.
  </li>
  <li>
   Must have experience managing multiple tasks and using sound judgment when managing risks, prioritizing and escalating.
  </li>
  <li>
   Must be able to work with deeply technical engineers, identify gaps that need addressing, and hold them to account.
  </li>
  <li>
   Security testing methodologies, tools and techniques - understanding of common application security vulnerabilities and controls to remediate.
  </li>
  <li>
   Expert knowledge of application security best practices including OWASP and CWE and cloud related concepts
  </li>
  <li>
   Hands-on software development and/or application Penetration Testing experience in complex environments an advantage
  </li>
  <li>
   The successful candidate will be able to balance project management trade-offs, own decisions and communicate effectively with senior stakeholders across business, partners, vendors, internal technology stakeholders and technology peers, with an eye towards influencing and driving positive business outcomes.
  </li>
  <li>
   Strong desire to learn and contribute solutions and ideas to a broad team.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Preferred Qualifications
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Experienced in Financial Services/Fintech
  </li>
  <li>
   BS or MS degree in Computer Science, Cyber Security, Information Security, or a related technical field.
  </li>
  <li>
   Experience with leveraging AI/ML to solve security problems and scale operations.
  </li>
  <li>
   Knowledge of secure coding languages (e.g., Python, Java, Go).
  </li>
  <li>
   Cloud related experiences
  </li>
  <li>
   CSSLP / CISSP / CCSP / OSCP is a plus
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  About Goldman Sachs
  <br/>
  <br/>
 </strong>
 At Goldman Sachs, we commit our people, capital and ideas to help our clients, shareholders and the communities we serve to grow. Founded in 1869, we are a leading global investment banking, securities and investment management firm. Headquartered in New York, we maintain offices around the world.
 <br/>
 <br/>
 We believe who you are makes you better at what you do. We're committed to fostering and advancing diversity and inclusion in our own workplace and beyond by ensuring every individual within our firm has a number of opportunities to grow professionally and personally, from our training and development opportunities and firmwide networks to benefits, wellness and personal finance offerings and mindfulness programs. Learn more about our culture, benefits, and people at GS.com/careers.
 <br/>
 <br/>
 We&rsquo;re committed to finding reasonable accommodations for candidates with special needs or disabilities during our recruiting process. Learn more: https://www.goldmansachs.com/careers/footer/disability-statement.html
 <br/>
 <br/>
 &copy; The Goldman Sachs Group, Inc., 2023. All rights reserved.
 <br/>
 <br/>
 Goldman Sachs is an equal opportunity employer and does not discriminate on the basis of race, color, religion, sex, national origin, age, veterans status, disability, or any other characteristic protected by applicable law.
</div>


Asset & Wealth Management - Doha - Vice President - Security Engineering

Mirion

<div><div><div><div><h1 class="jobSectionHeader"><b>Product Cybersecurity Engineer</b></h1>
</div><div><div>Req #145</div>
</div></div><div><div><div><div>Virtual&bull;
</div></div><div><div>United States</div></div></div></div></div></div>
<br><p></p><div><div><h2 class="jobSectionHeader"><b>Job Description</b></h2>
</div><div>Posted Tuesday, March 24, 2026 at 4:00 AM
</div><div></div><div><div><div><div><p>Mirion is seeking a motivated and enthusiastic Product Cybersecurity Engineer to support Mirion product lines. The engineer will play a crucial role providing cybersecurity advisory services and support to product owners, sales teams, and developers in the form of providing security guidance, reviews, and compliance information. Additionally, this role will build out processes and technical capabilities as assigned to support the Product Cybersecurity mission. This role will primarily support the Mirion Dosimetry line of products but may support additional other products as needed.</p><br>
<p></p><p><b>Primary Responsibilities</b></p>
<ul><li>Provide cybersecurity recommendations and advice to product development teams.</li>
<li>Assist with gathering evidence and providing information for customer security inquiries and for certification frameworks such as ISO 27001 and SOC 2.</li>
<li>Perform risk assessments on Mirion product software, hardware, and architectures.</li>
<li>Document and write product risk assessment and security control reports.</li>
<li>Review and aid with writing cybersecurity related information for product documentation.</li>
<li>Participate in product project meetings as the cybersecurity representative.</li>
<li>Develop or design system architecture for new or revised products.</li>
<li>Collaborate with cross-functional teams to ensure cybersecurity best practices are integrated into product development.</li>
<li>Stay informed about the latest cybersecurity threats, vulnerabilities, and industry&rsquo;s best practices.</li><br>
</ul><p></p><p><b>Potential Additional Responsibilities</b></p>
<ul><li>Participate in routine code vulnerability scans and triage activities.</li>
<li>Assist in the implementation and maintenance of developer code security technologies including SAST, SCA, and DAST tools.</li>
<li>Coordinating penetration testing and other application testing.</li>
<li>Other general tasks as assigned.</li><br>
 </ul><p></p><p><b>Required Qualifications and Experience</b></p>
<ul><li>Bachelor&rsquo;s degree in information technology, information security, or related field or equivalent practical experience.</li>
<li>Experience: 4+ years in a cybersecurity-focused role, with exposure to cybersecurity governance, risk, and compliance.</li>
<li>Familiarity with cybersecurity frameworks such as ISO 27001, IEC 62443, NIST 800-171, SOC 2, and Cyber Essentials.</li>
<li>Experience with software application architecture and secure software development practices.</li>
<li>Experience with embedded systems and associated security considerations.</li>
<li>Good understanding of cybersecurity concepts and best practices to secure hardware and software components.</li>
<li>Strong communication skills and a collaborative working style.</li>
<li>Desire to work and learn.</li><br>
</ul><p></p><p><b>Desired Qualifications and Experience</b></p>
<ul><li>Familiarity with cyber industry regulations such as FDA Cybersecurity Marking, CE Marking, EU GDPR, and EU Cyber Resilience Act.</li>
<li>Experience with automated SAST and DAST scanning solutions.</li>
<li>Experience with working with DevSecOps pipeline processes.</li>
<li>Experience with Azure and AWS cloud security.</li><br>
</ul></div></div></div></div><div></div><div><div><div><h2 class="jobSectionHeader"><b>Job Details</b></h2>
</div><div><div><div><div><div><div><div><div><div>Pay Type
</div><div>Salary</div></div></div></div></div></div></div></div></div></div><div></div><div><div><div><div><div>
</div></div></div></div></div></div><div></div><div><div><div><div><div>United States</div></div></div></div></div></div>

Product Cybersecurity Engineer

Stryker

<div><h3 class="jobSectionHeader"><b>Why join Stryker?</b></h3>
Looking for a place that values your unique talents? Discover Stryker's award-winning culture.<br>
We are proud to offer you our total rewards package which includes bonuses, healthcare, insurance benefits, retirement programs, wellness programs, as well as service and performance awards &ndash; not to mention various social and recreational activities, all of which are location specific.<h3 class="jobSectionHeader"><b>
Job description</b></h3>
We are excited to be named one of the World&rsquo;s Best Workplaces by Fortune Magazine! We are proud to offer you 12 paid holidays annually. For an overview of our benefits and time off, please follow this link to learn more:US Stryker employee benefits.<div><h2 class="jobSectionHeader"><b>
It's Time to Join Stryker!</b></h2><p></p><h2 class="jobSectionHeader"><b>
Why Join Us</b></h2><p>
At Stryker, you&rsquo;ll help shape the future of connected surgical technology. In this role, you will contribute to a unified ecosystem of tools and shared security services that proactively manage cybersecurity and data risks across the product lifecycle. You&rsquo;ll work across the full line of Mako robotic systems and connected platforms, helping ensure our products remain safe, secure, and compliant as they evolve.</p><p></p><h2 class="jobSectionHeader"><b>
Who We Want</b></h2><p>
We are looking for a collaborative and curious engineer who is passionate about building security into products&mdash;not just auditing it after the fact. This individual thrives working cross-functionally with engineering, quality, regulatory, and product teams, and is comfortable influencing without authority. You bring a strong foundation in software development within a regulated or quality-driven environment, paired with an interest in cybersecurity and a desire to deepen your expertise. You&rsquo;re someone who enjoys solving complex problems, communicating with both technical and non-technical partners, and pushing the organization forward as we continue integrating cybersecurity into our formal product development processes.</p><p></p><h2 class="jobSectionHeader"><b>
What You Will Do</b></h2><ul><li>
You will contribute to product cybersecurity strategy across the full Mako robotics portfolio, supporting secure product design throughout the development lifecycle</li><li>
You will perform cybersecurity risk assessments, threat modeling, and define mitigation strategies</li><li>
You will partner with cross-functional teams (R&amp;D, Quality, Regulatory, Product Management) to integrate cybersecurity into design controls and SDLC processes</li><li>
You will support alignment with evolving FDA cybersecurity expectations and industry standards</li><li>
You will help define and implement secure architecture practices, including access control, authentication, data protection, and network security</li><li>
You will perform and support penetration testing, vulnerability scanning, and remediation activities across hardware and software systems</li><li>
You will conduct code reviews (manual and automated) to identify and address security vulnerabilities in embedded and application software</li><li>
You will integrate automated security testing into CI/CD and development workflows</li><li>
You will automate workflows and extract insights using scripting languages such as Python, PowerShell, or similar</li><li>
You will support HIPAA-related product features and data protection considerations</li><li>
You will provide input to project teams on timelines, risks, and cybersecurity-related milestones</li><li>
You will support cybersecurity documentation needs for internal and external stakeholders (e.g., regulatory, legal, commercial teams)</li></ul><p></p><p><b>
What You Need</b></p><p><b>
Required Qualifications</b></p><ul><li>
Bachelor&rsquo;s degree in Computer Science, Software Engineering, or related discipline is required</li><li>
2+ years of experience in software development, systems engineering, or a related technical field is required</li></ul><p></p><h2 class="jobSectionHeader"><b>
Preferred Qualifications</b></h2><ul><li>
Experience working in a regulated industry (medical device, aerospace, automotive, etc.)</li><li>
Exposure to product or embedded cybersecurity concepts (does not require deep specialization)</li><li>
Familiarity with one or more security frameworks or standards (e.g., NIST, ISO, IEC)</li><li>
Experience with embedded systems, IoT, or connected devices</li><li>
Understanding of Windows and/or Linux operating systems</li><li>
Experience with cloud environments (AWS, Azure)</li><li>
Knowledge of networking fundamentals (TCP/IP, firewalls, authentication/authorization)</li><li>
Experience with scripting or programming languages (Python, PowerShell, etc.)</li><li>
Strong communication skills with the ability to partner across technical and non-technical teams</li></ul><p></p><p>
This is a hybrid role working on site 2-3 days a week at our Weston facility</p></div>
Health benefits include: Medical and prescription drug insurance, dental insurance, vision insurance, critical illness insurance, accident insurance, hospital indemnity insurance, personalized healthcare support, wellbeing program and tobacco cessation program. Financial benefits include: Health Savings Account (HSA), Flexible Spending Accounts (FSAs), 401(k) plan, Employee Stock Purchase Plan (ESPP), basic life and AD&amp;D insurance, and short-term disability insurance. Stryker offers innovative products and services in MedSurg, Neurotechnology, Orthopaedics and Spine that help improve patient and healthcare outcomes. Alongside its customers around the world, Stryker impacts more than 150 million patients annually. Depending on customer requirements employees and new hires in sales and field roles that require access to customer accounts as a function of the job may be required to obtain various vaccinations as an essential function of their role.</div>

Product Cybersecurity Engineer – Mako Robotics & Enabling Technologies

ServiceTitan

<div><p><b>Ready to be a Titan?</b></p><p>
At ServiceTitan, we are transforming product security into a core part of how engineering delivers software. We are looking for an AI-Focused Senior Application Security Engineer to help define and deliver a secure paved road, creating automated, developer friendly security patterns that enable our 80 plus R&amp;D teams to build securely by default without slowing down innovation.</p><p>
In this role, you will partner closely with engineering to embed practical guardrails, manage emerging risks like non-human identities and data exposure, and enable teams to move quickly without compromising trust. This is an opportunity to shape the future of application security in an AI first environment, turning security into a core enabler of innovation rather than a constraint.</p><h2 class="jobSectionHeader"><b>
What you&rsquo;ll do:</b></h2><p></p><p><b>
1. Secure-by-Design Engineering</b></p><ul><li><p><b>
Pipeline Automation:</b> Embed security directly into the development pipeline through intelligent prompting and AI driven agents.</p></li><li><p><b>
Secure-by-Default Code:</b> Collaborate with Engineering to develop and maintain secure microservice templates and libraries that have security controls built in from the start.</p></li><li><p><b>
Supply Chain Protections:</b> Implement controls to secure dependencies, build artifacts, and third party integrations. Partner with engineering to enforce integrity, provenance, and policy checks within build and release workflows.</p></li></ul><p></p><p><b>
2. AI-Driven Security Testing &amp; Validation</b></p><ul><li><p><b>
Automated Scanning:</b> Evaluate, configure, and implement AI agentic tooling to autonomously test our web applications for vulnerabilities.</p></li><li><p><b>
Simulation &amp; Validation:</b> Use agentic tooling to run proactive simulations based on emerging threats to validate our defenses in real time.</p></li><li><p><b>
Outcome Accountability:</b> Drive adherence to vulnerability remediation SLAs by partnering with engineering teams to track, prioritize, and resolve security issues. Ensure clear ownership, measurable progress, and consistent follow through to reduce risk and maintain accountability.</p></li></ul><p></p><p><b>
3. AI &amp; Identity Security</b></p><ul><li><p><b>
AI Guardrails:</b> Design and implement technical guardrails for AI Coding Agents and Model Context Protocols (MCP) to ensure safe adoption of AI in the development lifecycle.</p></li><li><p><b>
AI-Driven Tooling:</b> Help operationalize AI based tooling to act as a &quot;GPS&quot; for developers, tuning the system to provide accurate, on demand threat modeling, design, and development advice.</p></li><li><p><b>
Non-Human Identity Management:</b> Partner with engineering to define and implement strategies for managing machine identities across AI systems, including service accounts, API keys, and agent authentication. Enforce least privilege access, credential lifecycle management, and integration with secrets management and CI CD pipelines to reduce risk and prevent misuse.</p></li></ul><p></p><p><b>
4. Developer Enablement &amp; Security Operations</b></p><ul><li><p><b>
Technical &quot;Pit Crew&quot;:</b> Act as the AppSec technical expert for the Security Champions Program. While leadership manages the program logistics, you will be the expert answering complex coding questions and guiding Champions on how to fix vulnerabilities.</p></li><li><p><b>
Contextual Training:</b> Assist in setting up &quot;Just in Time&quot; training campaigns that trigger micro-trainings when engineers introduce vulnerabilities, allowing them to fix their own code.</p></li><li><p><b>
Triage to Automate:</b> Own the initial triage of incoming vulnerability tickets (SAST/SCA). You will use this hands on work to identify the &quot;noise&quot; and pattern match recurring issues, directly informing which guardrails you build next.</p></li></ul><p></p><h2 class="jobSectionHeader"><b>
What you&rsquo;ll bring:</b></h2><ul><li><p><b>
Experience:</b> 5+ years of experience in Product/Application Security, with a strong background in software engineering.</p></li><li><p><b>
Demonstrated AI Expertise:</b> Proven experience at the intersection of AI and security, including securing AI workloads and leveraging AI agents to enhance defensive capabilities.</p></li><li><p><b>
Modern AppSec:</b> Experience implementing tools and driving for secure outcomes throughout the Secure Software Development Lifecycle including Threat Modeling, Code Scanning, and Penetration testing.</p></li><li><p><b>
Automation Mindset:</b> Proven ability to prompt, script, and automate security tasks. You prefer building a tool to solve a problem over fixing it manually.</p></li></ul><p></p><h2 class="jobSectionHeader"><b>
Why this role?</b></h2><p><b>
Own Outcomes, Not Activity:</b> Your success will be measured by real risk reduction. You will directly influence vulnerability backlog reduction, remediation velocity, and the overall security posture of the organization.</p><p><b><br>
Operate at the Intersection of Engineering and Security:</b> You will work side by side with engineering teams to shape how software is built, secured, and deployed. This role gives you the platform to influence architecture, development practices, and platform level controls.</p><p></p><p><b>
Lead the Next Evolution of AppSec:</b> You will help define how modern security teams leverage automation and intelligent systems to scale. From secure by design patterns to autonomous testing and remediation, you will be pushing the boundaries of how security is done.</p><p><b><br>
High Ownership, High Leverage:</b> You will have the autonomy to identify problems, design solutions, and implement them end to end. The work you do will scale across teams and services, amplifying your impact well beyond a single application or domain.</p><p></p><p><b>
Be Human With Us:</b></p><p>
Being human isn&rsquo;t about checking every box on a list. It&rsquo;s about the experiences we have, people we meet, and the perspectives we share. So, if you have the skills but are hesitant to apply because of your background, apply anyway. We need amazing people like you to help us challenge the conventional and think differently about the problems that we&rsquo;re solving. We&rsquo;re in this together. Come be human, with us.<br>
<br>
<b>Use of AI Technology:</b></p><p>
We use technology, including automated and AI-assisted tools, to support certain aspects of our recruitment process. These tools are designed to improve efficiency and enhance the candidate experience. AI tools are not used to make hiring decisions; all hiring decisions are made by our hiring teams.</p><p></p><p><b>
What We Offer:</b><br>
When you join our team, you&rsquo;re not just accepting a job. You&rsquo;re making a career move. Here&rsquo;s how we&rsquo;ll support you in doing some of the most impactful work of your career:</p><ul><li><p><b>
Flextime, recognition, and support for autonomous work:</b> Flexible time off with ample learning and development opportunities to continue growing your career. We offer a comprehensive onboarding program, leadership training for Titans at all levels, and other programs and events. Great work is rewarded through Bonusly, peer-nominated awards, and more.</p></li><li><p><b>
Holistic health and wellness benefits</b>: Company-paid medical, dental, and vision (with 100% employer paid options and 90% coverage for dependents), FSA and HSA, 401k match, and telehealth options including memberships to One Medical.</p></li><li><p><b>
Support for Titans at all stages of life</b>: Parental leave and support, up to $20k in fertility services (i.e. IUI and IVF), surrogacy, and adoption reimbursement, on demand maternity support through Maven Maternity, free breast milk shipping through Maven Milk, pet insurance, legal advisory services, financial planning tools, and more.</p></li></ul><p></p><p>
At ServiceTitan, we celebrate individuality and uniqueness. We believe that the convergence of fresh perspectives and experiences from all walks of life is what makes our product and culture so great. We strongly encourage people from underrepresented groups to apply. We do not discriminate against employees based on race, color, religion, sex, national origin, gender identity or expression, age, disability, pregnancy (including childbirth, breastfeeding, or related medical condition), genetic information, protected military or veteran status, sexual orientation, or any other characteristic protected by applicable federal, state or local laws.</p><p></p>
ServiceTitan is committed to fair and equitable compensation for all of our employees. We thoughtfully consider a wide range of factors when determining individual compensation.The expected salary range for this role for candidates residing in the United States is between $125,700 USD - $168,100 USD. Compensation for candidates residing outside the United States will vary by location and the specific salary range will be discussed during the hiring process. Actual compensation for an individual may vary depending on skills, performance over time, qualifications, experience, and location. In addition to the base salary, the total compensation package also includes an annual bonus, equity and a holistic suite of benefits.</div>

Senior Application Security Engineer, AI

<div><h2 class="jobSectionHeader"><b>Ready to be a Titan?</b></h2><p>
At ServiceTitan, we are transforming product security into a core part of how engineering delivers software. We are looking for an exceptional Senior Application Security Engineer to help us build a &quot;Secure Paved Road&quot;&mdash;an automated, self-service ecosystem that enables our 80+ R&amp;D squads to build securely by default.</p><p>
This role will define and scale how secure software is built at ServiceTitan by embedding security directly into the development lifecycle, from code to production. It will reduce organizational risk by automating detection and remediation of vulnerabilities, standardizing secure architecture patterns, and eliminating entire classes of security issues at their source. By partnering closely with engineering, this role will drive a shift toward secure by default development while continuously validating defenses through testing, threat modeling, and proactive simulation.</p><p></p><h2 class="jobSectionHeader"><b>
What you&rsquo;ll do:</b></h2><p></p><h2 class="jobSectionHeader"><b>
1. Build the Secure Paved Road (Pipeline and Code)</b></h2><ul><li><p><b>
Pipeline Automation: </b>Deeply integrate GitHub Advanced Security into the CI/CD pipeline to act as automated checkpoints, providing fast feedback to engineers without manual intervention.</p></li><li><p><b>
Secure by Default Code: </b>Collaborate with Engineering to develop and maintain secure microservice templates and libraries with embedded security controls.</p></li><li><p><b>
Secrets and Supply Chain: </b>Lead hardcoded secrets mitigation efforts by automating detection and building workflows to validate compromised credentials via API.</p></li><li><p><b>
Secure SDLC Practices:</b> Drive cross functional initiatives to establish and continuously improve secure software development lifecycle practices across the organization.</p></li></ul><p></p><p><b>
2. Continuous Security Testing and Validation</b></p><ul><li><p><b>
Penetration Testing:</b> Lead onboarding and operation of continuous penetration testing capabilities across web applications and services.</p></li><li><p><b>
Security Assessments:</b> Participate in and help scale internal security assessments, penetration testing, and bug bounty programs.</p></li><li><p><b>
Tooling Ownership:</b> Evaluate, prototype, implement, and operate security tools including DAST, SAST, and SCA.</p></li><li><p><b>
Simulation and Validation: </b>Run proactive simulations based on emerging threats to validate defenses and identify gaps.</p></li></ul><p></p><h2 class="jobSectionHeader"><b>
3. Architecture and Threat Modeling</b></h2><ul><li><p><b>
Security Design Reviews: </b>Lead security design reviews and threat modeling for new and existing services.</p></li><li><p><b>
Secure Architecture: </b>Develop and maintain secure architecture standards, frameworks, and reusable patterns across multiple layers of the stack.</p></li><li><p><b>
Emerging Threat Analysis: </b>Continuously analyze evolving security threats, determine relevance, and implement centralized mitigations.</p></li></ul><p></p><h2 class="jobSectionHeader"><b>
4. Operational Support and Engineering Partnership</b></h2><ul><li><p><b>
Technical Leadership: </b>Act as the AppSec technical expert for the Security Champions Program, guiding engineers on vulnerability remediation and secure coding practices.</p></li><li><p><b>
Contextual Training: </b>Implement just in time training mechanisms that help engineers remediate vulnerabilities as they are introduced.</p></li><li><p><b>
Triage to Automate:</b> Own initial triage of vulnerability findings, identify patterns, and drive automation and guardrails to reduce recurring issues.</p></li><li><p>
Incident Response: Participate in security incident response and support post incident analysis and remediation efforts.</p></li></ul><p></p><h3 class="jobSectionHeader"><b>
5. Continuous Improvement and Expertise</b></h3><ul><li><p>
Maintain strong knowledge of current security threats, vulnerabilities, and operational best practices, applying that knowledge to continuously improve the organization&rsquo;s security posture.</p></li></ul><p></p><h2 class="jobSectionHeader"><b>
What you&rsquo;ll bring:</b></h2><ul><li><p>
Experience: 5+ years of experience in Product/Application Security, with a strong background in software engineering.</p></li><li><p>
Coding Expertise: Proficiency in C#/.NET (preferred) or Go/Java. You must be able to read code to find vulnerabilities and write code to fix them.</p></li><li><p>
Modern AppSec: Experience moving security &quot;left&quot; using tools like GitHub Advanced Security (GHAS), dependency scanners, and secret detectors.</p></li><li><p>
Automation Mindset: Proven ability to script (Python, Go, PowerShell) and automate security tasks. You prefer building a tool to solve a problem over fixing it manually.</p></li><li><p>
AI Forward: Interest in the intersection of AI and Security, specifically in securing AI workloads, leveraging AI capabilities to embed security throughout the SDLC, and using AI agents for defense.</p></li></ul><p></p><h2 class="jobSectionHeader"><b>
Why this role?</b></h2><p><b>
Own Outcomes, Not Activity:</b> Your success will be measured by real risk reduction. You will directly influence vulnerability backlog reduction, remediation velocity, and the overall security posture of the organization.</p><p></p><p><b>
Operate at the Intersection of Engineering and Security:</b> You will work side by side with engineering teams to shape how software is built, secured, and deployed. This role gives you the platform to influence architecture, development practices, and platform level controls.</p><p><b><br>
Lead the Next Evolution of AppSec:</b> You will help define how modern security teams leverage automation and intelligent systems to scale. From secure by design patterns to autonomous testing and remediation, you will be pushing the boundaries of how security is done.</p><p><b><br>
High Ownership, High Leverage:</b> You will have the autonomy to identify problems, design solutions, and implement them end to end. The work you do will scale across teams and services, amplifying your impact well beyond a single application or domain.</p><p></p><p><b>
Be Human With Us:</b></p><p>
Being human isn&rsquo;t about checking every box on a list. It&rsquo;s about the experiences we have, people we meet, and the perspectives we share. So, if you have the skills but are hesitant to apply because of your background, apply anyway. We need amazing people like you to help us challenge the conventional and think differently about the problems that we&rsquo;re solving. We&rsquo;re in this together. Come be human, with us.<br>
<br>
<b>Use of AI Technology:</b></p><p>
We use technology, including automated and AI-assisted tools, to support certain aspects of our recruitment process. These tools are designed to improve efficiency and enhance the candidate experience. AI tools are not used to make hiring decisions; all hiring decisions are made by our hiring teams.</p><p></p><p><b>
What We Offer:</b><br>
When you join our team, you&rsquo;re not just accepting a job. You&rsquo;re making a career move. Here&rsquo;s how we&rsquo;ll support you in doing some of the most impactful work of your career:</p><ul><li><p><b>
Flextime, recognition, and support for autonomous work:</b> Flexible time off with ample learning and development opportunities to continue growing your career. We offer a comprehensive onboarding program, leadership training for Titans at all levels, and other programs and events. Great work is rewarded through Bonusly, peer-nominated awards, and more.</p></li><li><p><b>
Holistic health and wellness benefits</b>: Company-paid medical, dental, and vision (with 100% employer paid options and 90% coverage for dependents), FSA and HSA, 401k match, and telehealth options including memberships to One Medical.</p></li><li><p><b>
Support for Titans at all stages of life</b>: Parental leave and support, up to $20k in fertility services (i.e. IUI and IVF), surrogacy, and adoption reimbursement, on demand maternity support through Maven Maternity, free breast milk shipping through Maven Milk, pet insurance, legal advisory services, financial planning tools, and more.</p></li></ul><p></p><p>
At ServiceTitan, we celebrate individuality and uniqueness. We believe that the convergence of fresh perspectives and experiences from all walks of life is what makes our product and culture so great. We strongly encourage people from underrepresented groups to apply. We do not discriminate against employees based on race, color, religion, sex, national origin, gender identity or expression, age, disability, pregnancy (including childbirth, breastfeeding, or related medical condition), genetic information, protected military or veteran status, sexual orientation, or any other characteristic protected by applicable federal, state or local laws.</p><p></p>
ServiceTitan is committed to fair and equitable compensation for all of our employees. We thoughtfully consider a wide range of factors when determining individual compensation.The expected salary range for this role for candidates residing in the United States is between $125,700 USD - $168,100 USD. Compensation for candidates residing outside the United States will vary by location and the specific salary range will be discussed during the hiring process. Actual compensation for an individual may vary depending on skills, performance over time, qualifications, experience, and location. In addition to the base salary, the total compensation package also includes an annual bonus, equity and a holistic suite of benefits.</div>

Senior Application Security Engineer

Search 10000+ Product security engineer jobs near you this April. New roles added regularly across leading industries. Apply today.