Product Security Lead

Eliassen Group; Irvine (CA); On-site; Confidential; Full time

Benefits offered by this job

Medical

Dental

Vision

401k with company matching

Life insurance

Job summary

Eliassen Group seeks a Product Security Lead to build and mature the product security program in Irvine, CA. This on-site role partners with an MSP to implement EU CRA compliance, then grows into full program ownership with potential direct reports.

The position reports to the CISO and requires on-site presence Monday–Thursday. W2 contractors receive a comprehensive benefits package and potential transition to a full-time FTE role.

Qualifications

• Experience leading a product security program and embedded security in development lifecycles.
• Familiarity with EU CRA compliance and related governance processes.
• Experience with SBOMs, vulnerability handling, and CRA conformity assessments.
• Ability to evolve into a player-coach with 1–2 direct reports as the program scales.

Responsibilities

• Serve as primary liaison to the MSP during the EU CRA compliance engagement.
• Coordinate engineering, product, legal, quality, and supply chain to meet MSP timelines and deliverables.
• Ensure timely provision of product architecture, SBOMs, and vulnerability handling information for CRA conformity assessments.
• Review and validate MSP outputs, including risk assessments and technical documentation.

Skills

Product security program management

Vulnerability management

Secure development practices

Stakeholder coordination

Job description

Description:

On-site Monday–Thursday in Irvine, CA

Our client seeks a Product Security Lead to build, own, and mature the product security program. The role will partner with an MSP to implement EU Cyber Resilience Act (CRA) compliance, then transition to full program ownership. The scope includes coordinating internal stakeholders, validating MSP deliverables, establishing governance and secure development practices, managing SBOMs and vulnerability processes, and preparing for ISO/SAE 21434 expansion. The position reports to the CISO and is expected to evolve into a player-coach role with 1–2 direct reports as the program scales. Familiarity with semiconductor industry practices is a plus. On-site presence is required Monday through Thursday to support internal customers across engineering, quality, legal, and related functions.

This is a contract to hire opportunity. Applicants must be willing and able to work on a w2 basis and convert to FTE following contract duration. For our w2 consultants, we offer a great benefits package that includes Medical, Dental, and Vision benefits, 401k with company matching, and life insurance.

Rate: $70.00 to $80.00/hr. w2

JN -092026-108664

Responsibilities:

• Serve as primary liaison to the MSP during the EU CRA compliance engagement.
• Coordinate engineering, product, legal, quality, and supply chain to meet MSP timelines and deliverables.
• Ensure timely provision of product architecture, SBOMs, and vulnerability handling information for CRA conformity assessments.
• Review and validate MSP outputs, including risk assessments, technical documentation, and gap