R&D Security Manager

Nemetschek Group; Dallas (TX); Hybrid; USD 129,000 - 162,000; Full time

Benefits offered by this job

Hybrid work model

Health benefits

Career growth

Job summary

Nemetschek Group is seeking an experienced R&D Security Manager to embed security into the product development lifecycle at HCSS, collaborating with Agile teams and security leadership. You will lead a security champions program and drive train-the-trainer initiatives to elevate awareness across R&D.

You will review code security, enforce repository hardening, and prioritize issues in sprint backlogs while ensuring GDPR compliance and regulatory alignment across the organization.

Qualifications

• Bachelor’s or Master’s degree in Information Security, Computer Science, Engineering, or related field.
• Multiple years of experience in a security role, preferably within R&D or high-tech environments.
• Strong knowledge of cybersecurity technologies and secure development practices.
• Proven ability to create clear security documentation and influence across teams.

Responsibilities

• Integrate security into the R&D product development lifecycle within Agile teams.
• Establish security training initiatives and drive awareness across R&D.
• Oversee secure source code management and vulnerability remediation.
• Collaborate with Shared Services and security leadership across Nemetschek.

Skills

Security in R&D

OWASP Top Ten

Snyk

Jira

Pentesting

Secure Coding

Cloud Security

XDR

Security Writing

Mentoring

Education

Bachelor’s or Master’s degree in Information Security, CS, Eng

Tools

Snyk

Jira

Job description

The Nemetschek Group is a pioneer in the digital transformation of the AEC/O industry, with a strong focus on open standards such as OPEN BIM. As one of the world’s leading groups in this industry, Nemetschek improves the construction process through intelligent software solutions that help customers plan, build, and operate buildings more efficiently, sustainably, and with fewer demands on resources.

HCSS, part of the Nemetschek Group, provides innovative software solutions that help heavy civil construction companies streamline their operations and improve productivity. While this position sits within Nemetschek, the R&D Security Manager will provide dedicated security support to HCSS and collaborate closely with its product development and engineering teams.

The R&D Security Manager will integrate security seamlessly into HCSS’s product development lifecycle, partnering with Agile teams to embed security into sprint planning and prioritize relevant risks. This person will establish initiatives such as a security champions program and "train-the-trainer" efforts to strengthen security awareness across R&D. The role will also support secure source code management, regulatory compliance, and the development of security documentation frameworks. By monitoring emerging threats and managing vulnerabilities, the R&D Security Manager will help protect intellectual property and sensitive data while serving as a key liaison among HCSS R&D, Nemetschek Shared Services, and the appropriate security leadership teams.

About The Role

• Implement comprehensive security strategies for the R&D department as part of the product development process (Agile Sprint Planning) and Reporting to Brand CISOs
• Establish a train the trainer initiative for awareness and knowledge exchange throughout the R&D personnel
• Review and Implement source code repository hardening and change management according to guideline
• Prioritize security issues in Sprint backlog
• Act as interface to Shared Services
• Establish Security Documentation (Setup and Maintenance of the Framework)
• Identify and document vulnerability remediation information (based on CVSS 4) to R&D engineers
• Identify and assess security risks related to R&D activities, including intellectual property, confidential data, and emerging technologies
• Ensure compliance with relevant security regulations like GDPR, industry standards, and company policies in software development through workshops

About You

• Education & Experience:
• Bachelor’s or Master’s degree in Information Security, Computer Science, Engineering, or related field.
• Multiple years of experience in a security role, preferably within R&D or high-tech environments.
• Technical Skills:
• Excellent Deep knowledge of cybersecurity technologies, such as web application firewalls, DAST, API security, Cloud and App Monitoring, XDR
• Familiarity with security challenges in R&D, such as secure coding, technology transfer, and emerging technologies.
• Technical Writing: Strong abilities for creating clear and comprehensive security documentation.
• OWASP Top Ten: In-depth knowledge of the security risks and practical experience in mitigating these vulnerabilities.
• Understanding of product development lifecycles and integrating security into R&D processes.
• Proficiency in security-related software like Snyk and Jira.
• Pentesting
• Soft Skills:
• "Speaking Developers Language"
• Strong problem-solving skills and the ability to manage complex projects.
• Excellent communication and collaboration skills to work with multidisciplinary teams.
• High ethical standards and attention to detail.
• Mentoring and knowledge transfer
• Certifications (preferred):
• Certified Information Systems Security Professional (CISSP)
• Certified Secure Software Lifecycle Professional (CSSLP) or similar

Why Nemetschek?

• Impact:We offer you a diverse position in a motivating work environment where you can realize your ideas.
• Sustainable Growth:In our sustainably growing and innovative company you have the chance to develop yourself further.
• Culture:With us you work in an international team with flat hierarchies and short decision-making processes, in which you can make a difference.
• Work-Life-Balance:We offer you various benefits in the areas of sports, nutrition, childcare and much more.
• Health:The health of all employees is important to us, which is why we offer you a wide range of health and preventive care services.
• Hybrid Way Forward:Through mobile working and variable working hours without core working hours, we enable you to be flexible, both professionally and privately.

We, the Nemetschek Group, are a global organization with employees from 60 nations. For us, diversity, equity, inclusion, and belonging are the keys to unleashing our full potential and driving true innovation. We can best support our customers in shaping the world through a diverse culture. We aim to treat EVERYONE with respect and appreciation, regardless of differences. Valuing diverse opinions and creating equal opportunities for all is of the utmost importance for us as an organization, and as individuals.

This role will report out of our Dallas or Sugarland office in a hybrid model.

Base Pay Range: $129,400 - $161,800 + Annual bonus

#Nemetschek