Engineering Manager – Product Security – Software Supply Chain

Schweitzer Engineering Laboratories, Inc.; Boise (ID); On-site; USD 129,000 - 194,000; Full time

Benefits offered by this job

ESOP

Competitive pay & benefits

Tuition assistance

Engineering development programs

Wellness programs

Job summary

Schweitzer Engineering Laboratories, Inc. seeks a seasoned Engineering Manager to lead the product security program for the software supply chain and automated security testing.

You will define and govern processes for secure component selection, SBOM management, and risk licensing while driving open-source collaborations and vendor relationships. You will guide a team of security-minded engineers, advance Secure SDLC practices, and align with regulatory standards such as IEC 62443-4-1 and the

Qualifications

• B.S. degree in Computer Science or equivalent experience.
• 8+ years software product development experience across the full Secure SDLC, including Embedded, Cloud-native, or Web development.
• 3+ years of experience with technical leadership in software development.
• Demonstrated proficiency with multiple programming languages.
• Demonstrated experience with software supply chain practices and tools.
• Excellent leadership and communication skills.
• Ability to learn new skills and assume new responsibilities.
• Willingness to travel occasionally (<10%).
• Experience with hiring, supervising, and growing a team.
• Experience with using AI effectively in the SDLC.
• Experience with contributing to open-source projects.
• Knowledge of vulnerability management and disclosure practices.
• Knowledge of cybersecurity risk assessment practices.
• Knowledge of IEC 62443-4-1 and the Cyber Resilience Act.

Responsibilities

• Oversee and improve product security programs related to the SEL software supply chain and relevant standards and regulations (e.g., 62443-4-1 and Cyber Resilience Act).
• Oversee the definition, selection, deployment, and associated product outcomes for automated security QA processes and tools.
• Maintain awareness of developing trends, technologies, and threats related to the secure SDLC.
• Supervise, lead, mentor, and grow a team of software engineers.
• Represent SEL at software industry conferences as needed.
• Model, teach, and apply SEL values and the Principles of Operations.

Skills

Leadership

Technical leadership

Programming languages

Software supply chain

Adaptability

Security standards

AI in SDLC

Open source

Vulnerability management

People management

Travel willingness

Software product development

Education

B.S. degree in Computer Science

Job description

The objective of R&D Product Security is to reduce the likelihood and potential impact of a cybersecurity incident on SEL and our customers over the next 5 years. Without cybersecurity, all three tenets of the SEL mission statement are imperiled: Making Electric Power Safer, More Reliable, and More Economical. The strategic pursuit of World-Class Product Security practices is a critical need for SEL and our customers in rising to the challenge of a rapidly evolving security landscape. To meet this need, R&D Product Security is expanding our team of experts to equip our product teams and oversee cybersecurity programs. We are seeking a passionate, seasoned leader to oversee the processes, tools, and systems that govern and manage the SEL Software Supply chain and automated security testing. This is a high-impact role, contributing to large corporate initiatives such as complying with the EU Cyber Resilience Act and improving the robustness of our Secure SDLC. You will lead, supervise, and grow a team of security-minded software engineers to deliver these outcomes. In this role, you will design and develop enterprise-grade approaches and best practices that enable SEL to deploy and demonstrate world-class management of its third-party and first-party firmware and software. This includes defining and governing our processes related to selecting components, ensuring secure provenance of components that we ingest, managing Software Bills of Materials, and managing licenses and risks associated with those components. This will also include defining programs for strengthening relationships with key vendors and sponsorship and/or contribution to key open-source projects. You will also oversee the SEL approach to programming languages and automated security QA, such as automated coding standards, linting, fuzzing and static analysis, that complement our software ingestion processes. You will identify best-in-class tools (as well as AI-driven approaches) and work with the Secure SDLC Automation, DevTools, and product teams to implement solutions and drive improved, efficient security outcomes. You will serve as a trusted advisor and consultant for product teams, ensuring that SEL continues to excel at delivering products with world-class security!

Essential Duties and Responsibilities

• Oversee and improve product security programs related to the SEL software supply chain and relevant standards and regulations (such as 62443-4-1 and the Cyber Resilience Act).
• Oversee the definition, selection, deployment, and associated product outcomes for automated security QA processes and tools.
• Maintain awareness of developing trends, technologies, and threats related to the secure SDLC.
• Supervise, lead, mentor, and grow a team of software engineers.
• Represent SEL at software industry conferences as needed.
• Model, teach, and apply SEL values and the Principles of Operations.

Required Qualifications

• B.S. degree in Computer Science or equivalent experience.
• 8+ years software product development experience across the full Secure SDLC, including at least one of the following areas: Embedded development, Cloud-native development , Web development.
• 3+ years of experience with technical leadership in software development.
• Demonstrated proficiency with multiple programming languages.
• Demonstrated experience with software supply chain practices and tools.
• Excellent leadership and communication skills.
• Ability to learn new skills and assume new responsibilities.
• Willingness to travel occasionally (<10%).

Preferred Qualifications

• Experience with hiring, supervising, and growing a team.
• Experience with using AI effectively in the SDLC.
• Experience with contributing to open-source projects.
• Knowledge of vulnerability management and disclosure practices.
• Knowledge of cybersecurity risk assessment practices.
• Knowledge of IEC 62443-4-1 and the Cyber Resilience Act.

Pay Range Data: Engineering Manager $129,200 - $193,900

• Competitive pay.
• Superior benefits.
• Inspiring work.
• People are at the core of our company and we hire employee-owners.
• We welcome you to learn more about how we support employees.
• We’re 100% employee owned.
• Retirement benefits include an employer funded stock ownership plan (ESOP) and personal 401(k) options.
• We offer top tier medical, prescription, dental, vision, life, and disability insurance.
• We recognize the importance of a healthy life balance and offer: 10 paid holidays, annual vacation accrual starting at 12 days, 9 paid sick days, and paid family and medical leave that covers 90% of your pay.
• We foster growth and development of our employees through avenues such as STEM courses, apprenticeships, tuition assistance, and engineering development programs.
• Ask our team about other benefits including wellness, fertility, adoption, and flexible spending benefits.

We are open to reviewing additional candidates with more or less experience and the pay range may differ if filled at a different level. Our pay ranges are determined by job and responsibility. We base our starting pay offer and title on job-related factors such as candidate experience, training, knowledge, and skills.

Communication with Applicants

We communicate with all applicants. If you do not receive a response about your application, please check your SPAM filter or reach out to us at [e-mail].

SEL is an Equal Opportunity Employer: Vets/Disabled.

SEL invents, designs, and builds digital products and systems that protect power grids around the world. This technology prevents blackouts and enables customers to improve power system reliability and safety at a reduced cost. A 100 percent employee-owned company headquartered in Pullman, Washington, SEL has manufactured products in the United States since 1984 and now serves customers worldwide. Our mission is simple: to make electric power safer, more reliable, and more economical.