R&D Security Manager — Secure Dev Lifecycle & Training

NEMETSCHEK AG; Dallas, Sugar Land (TX, TX); On-site; USD 129,000 - 162,000; Full time

Benefits offered by this job

Hybrid work model

Health and preventive care

Sports and fitness programs

Childcare support

Job summary

Nemetschek AG's R&D Security Manager role sits within HCSS and will embed security into the product development lifecycle. You will partner with Agile teams to prioritize risks, establish security training, and drive secure software practices across R&D while coordinating with Nemetschek Shared Services and security leadership.

The role emphasizes secure source code management, regulatory compliance, vulnerability monitoring, and documentation frameworks, reporting to Brand CISOs in a

Qualifications

• Bachelor's or Master's degree in Information Security, CS, Engineering, or related field.
• Multiple years of security experience in R&D or high-tech environments.
• Deep knowledge of cybersecurity technologies and secure development practices.
• Understanding of GDPR and industry security standards.
• Experience with security tooling like Snyk and Jira, and documentation.

Responsibilities

• Implement security strategies for R&D within Agile sprint planning and governance.
• Establish training initiatives to raise security awareness among R&D staff.
• Review source code repository hardening and change management per guidelines.
• Prioritize security issues in sprint backlog and coordinate remediation.
• Serve as interface to Shared Services and security leadership teams.
• Develop and maintain security documentation frameworks and issues tracking.

Skills

Cybersecurity expertise

Secure coding

OWASP Top Ten

Cloud security

Security documentation

Fluent communication

Education

BSc/MSc Information Security or related

Tools

Snyk

Jira

Job description

Nemetschek AG's R&D Security Manager role sits within HCSS and will embed security into the product development lifecycle. You will partner with Agile teams to prioritize risks, establish security training, and drive secure software practices across R&D while coordinating with Nemetschek Shared Services and security leadership.

The role emphasizes secure source code management, regulatory compliance, vulnerability monitoring, and documentation frameworks, reporting to Brand CISOs in a