Lead Cyber Product Security Engineer: ASPM-Driven Security

Toyota; Plano (AL); On-site; USD 150,000 - 190,000; Full time

Benefits offered by this job

Comprehensive health care

401(k) with company match

Tuition reimbursement

Job summary

Toyota Financial Services (TFS) Technology team is seeking a Cyber Product Security Engineer, Lead, to drive security across the product lifecycle. You will collaborate with product management, engineering, and security to embed security into development, mitigate risks, and protect customers and assets.

You will lead threat modeling, design reviews, vulnerability assessments, and security testing, ensuring policies and standards align with industry requirements.

Qualifications

• 8+ years of experience in application security and secure software development practices.
• Strong understanding of web application vulnerabilities (OWASP Top 10) and mitigations.
• Proficiency in programming languages used in web apps (Java, Python, JavaScript).
• Certifications such as CISSP/CSSLP/CEH are desirable.

Responsibilities

• Lead security initiatives across the product lifecycle and embed security into PDLC.
• Collaborate with product, engineering and security teams to define controls and policy implementations.
• Oversee security risk assessments and remediation plans for new and existing products.
• Develop and maintain product security architecture documentation and standards.

Skills

Cybersecurity

Security architecture

Leadership

Threat modeling

Vulnerability assessment

Secure SDLC

Cloud security

DevSecOps

Education

Bachelor's in CS/InfoSec

Tools

Java

Python

JavaScript

Job description

Toyota Financial Services (TFS) Technology team is seeking a Cyber Product Security Engineer, Lead, to drive security across the product lifecycle. You will collaborate with product management, engineering, and security to embed security into development, mitigate risks, and protect customers and assets.

You will lead threat modeling, design reviews, vulnerability assessments, and security testing, ensuring policies and standards align with industry requirements.