Product Security Engineer

RXinsider LTD.; Lincolnshire, Northern (IL, KY); Hybrid; USD 123,000 - 184,000; Full time

Job summary

Zebra is seeking an Advanced Product Security Engineer for the Print and Encode unit, onsite in Lincolnshire, IL (hybrid with 3 days in the office). You will align security with product goals and embed secure-by-design practices across hardware, software, and cloud integrations.

Lead threat modeling, security testing, and remediation efforts while collaborating across teams. The role requires 6+ years in product security or embedded systems, with CS/CE/Cybersecurity background and experience in

Qualifications

• Bachelor's degree in Computer Science, Computer Engineering, Cybersecurity, or a related technical discipline.
• 6+ years of experience
• Hands-on experience in product security, embedded systems security, or a closely related field.
• Hands-on experience securing embedded systems, software, or IoT devices.
• Master's degree in a relevant engineering or cybersecurity field is preferred.
• Proven experience integrating security into the CI/CD pipeline and product development lifecycle.
• Proficiency in one or more programming languages such as C, C++, Python, or Java.
• Deep technical expertise in Hardware Security (e.g., TPM, TrustZone, secure boot, tamper resistance, cryptography).
• Experience specific to IoT, connected devices, or AIDC technologies.
• Familiarity with industry security standards and compliance requirements (IEC 62443, FIPS 140).
• Industry-recognized security certifications (CISSP, CSSLP, GSEC, or offensive security certifications).
• Strong communication skills to articulate security risks to technical teams and leadership.
• Relevant licenses, certifications, or special qualifications including CISSP, CSSLP, GSEC, or equivalents.

Responsibilities

• Collaborate with stakeholders to define and prioritize security requirements for new and existing products.
• Perform threat modeling and design reviews to ensure security is built into software and firmware from ground up.
• Develop, implement, and enforce security controls across the SSDLC.
• Coordinate with hardware, firmware, software, and systems teams to integrate security without impacting time-to-market.
• Respond to and lead remediation of product security vulnerabilities and incidents.
• Oversee security assessments, including penetration testing and code reviews.
• Serve as primary technical contact for customer security questionnaires and audits.
• Align with corporate security to apply policies and best practices within product development.
• Create and maintain documentation for security architecture and best practices.
• Deliver security training to development teams to promote security awareness.
• Stay current with threats and mitigation techniques related to IoT, embedded systems, software, and firmware.
• Mentor junior engineers and champion security within the organization.
• Evaluate and manage security tools (SAST, DAST, SCA) to automate testing in CI/CD.

Skills

C

C++

Python

Java

Threat modeling

SSDLC

IoT security

Communication

Security standards

Education

Bachelor's degree in Computer Science, Computer Engineering, Cybersecurity, or related discipline

Master's degree in engineering or cybersecurity

Tools

SAST

DAST

SCA

CI/CD pipelines

Job description

Overview

At Zebra, we are a community of innovators who come together to create new ways of working. United by curiosity and a culture of caring, we develop smart solutions that anticipate our customers' and partners' needs and solve their challenges.

Being part of Zebra Nation means you are seen, heard, valued, and respected. Drawing from our unique perspectives, we collaborate to deliver on our purpose. Here you are part of a team pushing boundaries today to redefine the work of tomorrow for organizations, their employees, and those they serve.

You'll have opportunities to learn and lead in a forward-thinking environment, defining your path to a fulfilling career while channeling your skills toward causes you care about-locally and globally.

Come make an impact every day at Zebra.

What We're Looking For

Advanced Product Security Engineer for the Print and Encode business unit, reporting to the Director of Systems Engineering. The Product Security Engineer is responsible for aligning security strategies with the business unit's product development goals. This role drives the adoption of secure engineering principles across the lifecycle of both physical hardware devices and software solutions (applications, and cloud integrations). The role is focused on ensuring the security of our products, both software and hardware throughout the development lifecycle and is critical to ensuring our devices are developed with secure-by-design principles. Maintaining the resilience of our product ecosystem against evolving threats. The Product Security Engineer will proactively embed security into the development process for both software and firmware, particularly for our thermal printers and barcode scanners. This position includes responding to security issues, managing customer security inquiries, and collaborating with the different development teams as well as the corporate product security team to adhere to best practices.

Location- ***Role is required to be onsite in Lincolnshire, IL office (Hybrid- Minimum of 3 days in the office per week).

• Collaborate with stakeholders, including product management and engineering, to define and prioritize security requirements for new and existing products.
• Participate in design and architecture reviews with the engineering teams to conduct threat modeling and ensure security is built into software and firmware from the ground up.
• Develop, implement, and enforce security controls and best practices throughout the secure software development lifecycle (SSDLC).
• Collaborate closely with hardware, firmware, software, and systems engineering teams to ensure security requirements are seamlessly integrated without compromising product functionality or time-to-market.
• Respond to, investigate, and lead the remediation of product security vulnerabilities and participate if an incident happens.
• Oversee security assessments, including penetration testing and code reviews, to proactively identify and mitigate security flaws.
• Serve as the primary technical contact for responding to customer security questionnaires, audits, and inquiries, clearly communicating our security posture.
• Align with the corporate security teams to implement and adapt corporate security policies, standards, and best practices within product development.
• Create and maintain detailed documentation for security architecture, and security best practices.
• Develop and deliver security training to development teams to foster a culture of security awareness and accountability.
• Stay current with the latest security threats, vulnerabilities, and mitigation techniques relevant to IoT, embedded systems, software, and firmware.
• Mentor junior engineers and act as a security champion and subject matter expert within the engineering organization.
• Evaluate, implement, and manage security tools (e.g., SAST, DAST, SCA) to automate security testing within the CI/CD pipeline.

Qualifications

Required Qualifications

• Bachelor's degree in Computer Science, Computer Engineering, Cybersecurity, or a related technical discipline.
• 6+ years of experience
• Hands-on experience in product security, embedded systems security, or a closely related field.
• Hands-on experience securing embedded systems, software, or IoT devices.
• Preferred Qualifications
• Master's degree in a relevant engineering or cybersecurity field.
• Proven experience integrating security into the CI/CD pipeline and product development lifecycle.
• Proficiency in one or more programming languages such as C, C++, Python, or Java. (Not necessary but desirable)
• Deep technical expertise in Hardware Security (e.g., TPM, TrustZone, secure boot, tamper resistance, cryptography).
• Experience specific to IoT, connected devices, or automatic identification and data capture (AIDC) technologies.
• Familiarity with industry security standards and compliance requirements (e.g., IEC 62443, FIPS 140).
• Industry-recognized security certifications (e.g., CISSP, CSSLP, GSEC, or offensive security certifications).
• Strong communication skills with the ability to articulate complex security risks to both technical teams and executive leadership.
• Licenses, Certifications, or Special Qualifications:
• Security certifications such as CISSP, CSSLP, GSEC, or equivalent are a plus.

Location- ***Role is required to be onsite in Lincolnshire, IL office (Hybrid- Minimum of 3 days in the office per week).

Equal Opportunity Employer

Zebra is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability and protected veteran status, or any other basis prohibited by law. If you are an individual with a disability and need assistance in applying for a position, please contact us at [e-mail].

We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation at [e-mail] .

Know Your Rights

https://www.eeoc.gov/sites/default/files/2022-10/EEOC_KnowYourRights_screen_reader_10_20.pdf

Conozca Sus Derechos

https://www.eeoc.gov/sites/default/files/2022-10/22-088_EEOC_KnowYourRightsSp_10_20.pdf

Pay Range

$122,800.00 - $184,200.00 Annual

Incentive Compensation

In addition to base pay, Zebra offers this role the opportunity to earn a performance-based annual cash incentive, at a target equal to 12% of base pay, in accordance with the terms of the applicable incentive plan.

Zebra Total Rewards

Zebra Total Rewards includes more than just pay and is structured to meet the needs of our changing global business and evolving talent. We are committed to providing our employees with a benefits program that is comprehensive and competitive - including healthcare, wellness, inclusion networks, and continued learning and development offerings. We offer community service days, in addition to the traditional insurances, compensation, parental leave, employee assistance program and paid time off offerings depending on the country where you work.

Salary offered will vary depending on your location, job-related skills, knowledge, and experience.

Additionally, all Zebra roles are eligible for cash incentive programs. For example, sales roles have additional opportunity to earn substantial variable compensation tied to quota achievement. In most other roles, the Zebra annual cash incentive program links Company and individual performance together. Some roles may also be eligible for long-term incentive equity awards.

Benefits

We understand the importance of work-life balance and wellbeing, which is why we offer flexibility for our teams including: hybrid work, adaptable hours, Summer Flex Fridays, Focus Fridays, and an annual companywide well-being day to promote revitalization and success.

Job Posting Statement

To protect candidates from falling victim to online fraudulent activity involving fake job postings and employment offers, please be aware our recruiters will always connect with you via @zebra.com email accounts. Applications are only accepted through our applicant tracking system and only accept personal identifying information through that system. Our Talent Acquisition team will not ask for you to provide personal identifying information via e-mail or outside of the system. If you are a victim of identity theft contact your local police department.

AI Technology Statement

Zebra Technologies leverages AI technology to evaluate job applications using objective, job-relevant criteria. This approach enhances efficiency and promotes fairness in the hiring process. However, every decision regarding interviews and hiring is made by our dedicated team, because we believe people make the best decisions about people. For more on how we use technology in hiring and how we process applicant data, see our Zebra Privacy Policy.