Lead Cyber Product Security Engineer

Toyota North America; Plano (TX); On-site; USD 140,000 - 190,000; Full time

Benefits offered by this job

Team Member Vehicle Purchase Discount

Toyota Team Member Lease Vehicle

Healthcare and wellness plans

401(k) with company match

Paid holidays and vacation

Job summary

Toyota North America’s Toyota Financial Services Technology team in Plano, TX seeks a Cyber Product Security Engineer, Lead to drive secure product development across the lifecycle. You will partner with product managers, engineers, and security teams to embed security controls, perform threat modeling, and guide risk remediation.

The ideal candidate has 8+ years in application security, strong knowledge of OWASP Top 10, experience with cloud and DevSecOps, and excellent leadership and

Qualifications

• Bachelor's degree in Computer Science, Information Security, or related field; advanced degree preferred.
• 8+ years in application security focusing on secure software development.
• Strong understanding of web vulnerabilities and mitigation, OWASP Top 10.
• Proficiency in Java, Python, or JavaScript.
• Certifications such as CISSP, CSSLP, CEH desirable.
• Excellent analytical and problem-solving skills with cross-functional collaboration.
• Leadership and communication skills to work with cross-functional teams.
• Experience with cloud security, containerization, and DevSecOps is a plus.

Responsibilities

• Lead and collaborate with product engineering teams to build securely with threat modeling, secure design reviews, vulnerability assessments, and security testing.
• Collaborate with product managers, engineers, and architects to integrate security requirements and controls into the product development lifecycle (PDLC).
• Oversee security risk assessments and mitigation plans for new and existing products.
• Lead the design and implementation of product security policies, standards, and best practices in alignment with industry standards and regulatory requirements.
• Safeguard products across the software lifecycle with a comprehensive understanding of their security posture.
• Partner with security architecture, application security, cyber defense, product, IT operations, risk and governance ensuring products are secure.
• Leverage data-driven practices—centered on introducing an ASPM platform—to continuously assess, prioritize risk remediation across applications, services, and pipelines.
• Monitor and analyze security incidents related to applications, and coordinate incident response and remediation efforts as needed.
• Stay current with emerging threats, vulnerabilities, and industry trends in product security.
• Develop and maintain documentation related to product security architecture, processes, and procedures.

Skills

AppSec experience

OWASP Top 10

Java/Python/JS

Leadership

Communication

Cloud security

DevSecOps

Education

Bachelor's degree in CS/InfoSec

Tools

AWS

Kubernetes

CI/CD tooling

Job description

Toyota North America’s Toyota Financial Services Technology team in Plano, TX seeks a Cyber Product Security Engineer, Lead to drive secure product development across the lifecycle. You will partner with product managers, engineers, and security teams to embed security controls, perform threat modeling, and guide risk remediation.

The ideal candidate has 8+ years in application security, strong knowledge of OWASP Top 10, experience with cloud and DevSecOps, and excellent leadership and