Lead Security Mobile Engineer

Jobtailor; Golden (CO); On-site; USD 120,000 - 190,000; Full time

Job summary

Allegion is seeking a Senior Product Security professional to lead security strategy for mobile software and IoT products. You will partner with engineering to embed security into the software development lifecycle and mentor engineers globally on security controls and risk management.

The role requires 8+ years in mobile development, 2–5 years in security leadership, and a Bachelor's in a related field. Some travel is expected; certifications are preferred.

Qualifications

• 8+ years of mobile software development experience.
• 2–5 years leading security strategy across multiple products.
• Excellent interpersonal skills to influence across the enterprise.
• Strong learning agility to gain visibility across the global portfolio.
• Technical expertise delivering secure mobile apps and IoT products.
• Bachelor's degree in CS/CE/IS/Cybersecurity or equivalent.
• Industry certifications preferred.
• Experience in a diverse, global, fast-paced environment.

Responsibilities

• Serve as product security point of contact for development teams enterprise-wide.
• Embed security and privacy into the SDLC via architecture reviews and secure coding.
• Coach engineers on security tools, risk management, and balancing security with business needs.
• Contribute to concepts, design, deployment and lifecycle management of Allegion’s software operations.
• Promote standard security architecture conventions for mobile apps, SDKs, and devices.
• Participate in solution assessments across lifecycle; testing including ethical hacking.
• Provide guidance to third-party installations through requirements and validation.
• Contribute to security operations including threat modeling, monitoring and incident response.
• Stay updated on threats and security controls to secure the ecosystem.
• Participate in architecture reviews and advise on control design.
• Protect the company from business risks including fines and reputational damage.
• Approximately 15% travel may be expected.

Skills

Mobile software development

Security strategy leadership

Interpersonal skills

Learning agility

Technical security expertise

Education

Bachelor's degree in CS/CE/IS/Cybersecurity or equivalent

Tools

Security certifications

Job description

Responsibilities

• Serve as product security point of contact for software and product development teams across the enterprise including matters related to data privacy, devices, cloud, API, and application security.
• Partner with engineering teams to embed security and privacy into the software development lifecycle through architecture reviews, security requirements, secure coding practices, and automated security controls.
• Coach and mentor engineers throughout Allegion’s global product engineering and software operations on security tools, risk management, and balancing application of security against business needs and risks.
• Contribute to concepts, design, deployment, and lifecycle management related to Allegion’s global product engineering and software operations.
• Promote the implementation of standard security architecture conventions to ensure the availability, performance, scalability and security of Allegion’s mobile applications, mobile SDKs, and connected products.
• Participate in solution assessments across the solution lifecycle: concept, design, pre-deployment, post-deployment, end of life. This may involve testing inclusive of ethical hacking.
• Provide guidance to third-party-managed product installations globally through the specification of requirements and validation of operations.
• Contribute to the execution of security operations inclusive of threat modeling, monitoring and incident response across mobile applications, APIs, cloud services, and connected devices.
• Keep up with the latest security threats, attack vectors, mobile technologies, cloud computing technologies, embedded processing technologies, and associated security controls to ensure the security ecosystem is well-architected to address key risks.
• Participate in technology and security architecture reviews and serve as a trusted advisor to global software and product development teams on architecture and control design.
• Protect the company from a wide-variety of business risks ranging from financial loss, regulatory fines and penalties, loss of intellectual property, and/or brand/reputation risk.
• Approximately 15% travel may be expected.

Requirements

• 8 + years of mobile software development experience.
• At least two to five years as a demonstrated security practitioner leading a security strategy across multiple products.
• Excellent interpersonal skills required to influence and partner with all levels across the enterprise on matters of product development, software development and cloud deployment/operations including risk mitigations.
• High degree of learning agility required to quickly gain visibility across Allegion’s global software and product portfolio.
• Highly technical product security practitioner with working knowledge of delivering secure mobile applications, IoT products and services globally using modern technologies.
• College degree in Computer Science, Computer Engineering, Information Systems, Cybersecurity or equivalent education/experience required.
• Related industry certifications are preferred.
• Preferred candidates will have experience delivering results successfully in a diverse, global, and fast-paced environment.