Hybrid R&D Security Manager — Secure SDLC & Mentoring

Bluebeam, Inc.; United States; Hybrid; USD 129,000 - 162,000; Full time

Benefits offered by this job

Hybrid work model

Health & wellness benefits

Flexible working hours

Job summary

Nemetschek Group's HCSS unit seeks an experienced R&D Security Manager to embed security into the product development lifecycle. You will partner with Agile teams to prioritize risks, build a security champions program, and conduct train-the-trainer initiatives across R&D.

You will oversee secure source code management, regulatory compliance, and security documentation frameworks, coordinating with Shared Services and security leadership.

Qualifications

• Bachelor’s or Master’s in Information Security, CS, Engineering, or related field.
• Multiple years of experience in a security role, preferably within R&D or high-tech environments.
• Extensive knowledge of cybersecurity technologies (WAF/DAST, API security, cloud monitoring, XDR).
• Strong technical writing abilities and understanding of OWASP Top Ten.
• Experience with secure coding practices and vulnerability management.

Responsibilities

• Implement security strategies for the R&D department as part of the product development process.
• Establish a train-the-trainer initiative for awareness and knowledge exchange across R&D personnel.
• Review and implement source code repository hardening and change management according to guidelines.
• Prioritize security issues in Sprint backlog.
• Interface with Shared Services and security leadership teams.
• Establish Security Documentation Framework and ongoing maintenance.
• Identify and document remediation information for R&D engineers based on CVSS scores.
• Assess security risks related to IP, confidential data, and emerging technologies.
• Ensure GDPR compliance and industry standards through workshops.

Skills

WAF & DAST

API security

Cloud monitoring

XDR

Secure coding

OWASP Top Ten

Pentesting

Technical writing

Education

Bachelor's or Master's in Information Security/CS/Engineering

CISSP

CSSLP

Tools

Snyk

Jira

Job description

Nemetschek Group's HCSS unit seeks an experienced R&D Security Manager to embed security into the product development lifecycle. You will partner with Agile teams to prioritize risks, build a security champions program, and conduct train-the-trainer initiatives across R&D.

You will oversee secure source code management, regulatory compliance, and security documentation frameworks, coordinating with Shared Services and security leadership.