R&D Security Lead — Secure SDLC & Threat Prevention

Nemetschek Group; Dallas (TX); Hybrid; USD 129,000 - 162,000; Full time

Benefits offered by this job

Hybrid work model

Health benefits

Career growth

Job summary

Nemetschek Group is seeking an experienced R&D Security Manager to embed security into the product development lifecycle at HCSS, collaborating with Agile teams and security leadership. You will lead a security champions program and drive train-the-trainer initiatives to elevate awareness across R&D.

You will review code security, enforce repository hardening, and prioritize issues in sprint backlogs while ensuring GDPR compliance and regulatory alignment across the organization.

Qualifications

• Bachelor’s or Master’s degree in Information Security, Computer Science, Engineering, or related field.
• Multiple years of experience in a security role, preferably within R&D or high-tech environments.
• Strong knowledge of cybersecurity technologies and secure development practices.
• Proven ability to create clear security documentation and influence across teams.

Responsibilities

• Integrate security into the R&D product development lifecycle within Agile teams.
• Establish security training initiatives and drive awareness across R&D.
• Oversee secure source code management and vulnerability remediation.
• Collaborate with Shared Services and security leadership across Nemetschek.

Skills

Security in R&D

OWASP Top Ten

Snyk

Jira

Pentesting

Secure Coding

Cloud Security

XDR

Security Writing

Mentoring

Education

Bachelor’s or Master’s degree in Information Security, CS, Eng

Tools

Snyk

Jira

Job description

Nemetschek Group is seeking an experienced R&D Security Manager to embed security into the product development lifecycle at HCSS, collaborating with Agile teams and security leadership. You will lead a security champions program and drive train-the-trainer initiatives to elevate awareness across R&D.

You will review code security, enforce repository hardening, and prioritize issues in sprint backlogs while ensuring GDPR compliance and regulatory alignment across the organization.