Head of Product Security & Trust

Aptiv; Walnut Creek (CA); Sur place; USD 210 000 - 250 000; Plein temps

Avantages offerts par ce poste

Health insurance

Dental insurance

Vision insurance

Life insurance

Flex time off

401k eligibility

12 paid holidays

Résumé du poste

Wind River is seeking an experienced Secure Software Engineering Professional to lead the Product Security Office and scale trust across our product portfolio. You will architect the security roadmap, drive compliance initiatives, and mentor security champions within engineering teams.

The role requires broad experience in security standards, threat modeling, and incident response, with strong cross-functional leadership and communication skills to collaborate with CTO, Product, IT, Legal, and

Qualifications

• Bachelor's degree in Engineering, Computer Science, Information Security, or a related technical field.
• 10+ years of experience in software engineering, program management, governance, compliance, or related leadership roles.
• 5+ years of people management experience leading technical, compliance, or program teams.
• Direct experience mobilizing security standards/certifications/frameworks like FIRST.org, OWASP SAMM, IEC 62443, ISO 21434, NIST 800-218, FIPS 140-3, DISA STIG, Common Criteria, CMMC, FedRAMP, or similar.
• Broad practical experience with the NIST 800 series, including 800-53, 800-171, and others.
• Experience with threat modeling frameworks such as TARA, STRIDE, PASTA, ATT&CK, or similar.
• Practical experience with secure software testing techniques and tools including SAST, DAST, Fuzzing, Security Features, and Penetration Testing.
• Experience with vulnerability and incident management coordination and CVSS scoring.
• Experience mobilizing secure software development techniques across an organization.
• Experience using agile methods to deliver secure software.
• Experience leading full-stack software solutions, preferably for product security.

Responsabilités

• Lead the Product Security Office and grow a mature security team.
• Architect the product security trust roadmap and scale the compliance framework to meet business priorities.
• Empower product security compliance across engineering and across CTO Office, Product Management, IT, Legal, InfoSec, and SecOps.
• Mentor and empower security champions throughout product software engineering.
• Architect and lead execution of organization-wide product security assurance platforms.
• Lead the Product Security Incident Response Team (PSIRT) operations.
• Manage customer product security trust and compliance.
• Provide training and guidance to development teams on secure development practices.

Connaissances

Security leadership

Threat modeling

Vulnerability management

SAST/DAST

Software security

Agile

Communication

Formation

Bachelor's degree in Engineering/CS/InfoSec

Outils

FIRST.org

OWASP SAMM

IEC 62443

ISO 21434

NIST 800-53/171

FIPS 140-3

Description du poste

Wind River is seeking an experienced Secure Software Engineering Professional to lead the Product Security Office and scale trust across our product portfolio. You will architect the security roadmap, drive compliance initiatives, and mentor security champions within engineering teams.

The role requires broad experience in security standards, threat modeling, and incident response, with strong cross-functional leadership and communication skills to collaborate with CTO, Product, IT, Legal, and