Security Engineer

Elotouch; Milpitas (CA); Presencial; USD 130.000 - 179.000; Jornada completa

Descripción de la vacante

Elo is seeking a Security Engineer to join our R&D team in Milpitas, CA. This hands-on senior role strengthens security across Android devices, AWS cloud, payment products, and the software supply chain.

You will define security strategy, implement controls, and lead vulnerability remediation while collaborating with Software Engineering, Product Security, IT, Compliance, and external partners. 8+ years of experience; Docker/Kubernetes and cloud security preferred.

Formación

• Bachelor-level degree in a technical field is required.
• Experience building security into software and product development.
• Hands-on with security tooling in CI/CD pipelines and remediation.

Responsabilidades

• Define and execute the Software Engineering security strategy, roadmap, standards, and measurable objectives.
• Integrate SAST/SCA, secrets detection, IaC scanning into CI/CD pipelines.
• Drive software supply chain security including SBOMs, governance, and risk management.
• Establish code signing and artifact integrity across Android apps, firmware, and containers.
• Lead vulnerability management across device, cloud, and payment ecosystems; set SLAs.

Conocimientos

CI/CD security tooling

AWS security

Docker

Kubernetes

Programming languages (Java, Kotlin, C

Threat modeling

Vulnerability management

Code signing

Security governance

Security compliance

Cross-team influence

Educación

Bachelor’s degree in computer science or related field

Herramientas

SAST

SCA

CI/CD tooling

SBOM

Dependency-Track

Cycode

SonarQube

Fortify

Checkmarx

GitHub Advanced Security

Mend

Snyk

Descripción del empleo

If you are unable to complete this application due to a disability, contact this employer to ask for an accommodation or an alternative application process.

Security Engineer

Regular Full-Time R & D Milpitas, CA, US

Salary Range: $130,400.00 To $179,000.00 Annually

We know touch - it's our only business. In fact, we invented the touchscreen over 50 years ago and haven't stopped since. Every 21 seconds, a new Elo touch screen is installed somewhere in the world. We obsess over details to exceed the highest quality standards. We don't just sell things. We offer solutions to tomorrow's challenges.

Job Purpose & Responsibilities:

Elo is seeking an experienced Security Engineer to serve as a senior technical security leader within Software Engineering. This is a hands-on individual contributor role responsible for strengthening the security posture of Elo's Android devices, AWS cloud services, payment products, software development environments, and software supply chain.

You will define and execute security engineering strategy, establish technical controls and standards, drive vulnerability remediation, and partner closely with Software Engineering, Product Security, Enterprise Security, IT, Product Management, Quality, Compliance, and external partners.

The ideal candidate combines strong hands-on security engineering expertise with the ability to influence across teams and drive measurable security outcomes.

Key Responsibilities

• Define and execute the Software Engineering security strategy, roadmap, standards, and measurable objectives.
• Integrate and operate SAST, SCA, secrets detection, IaC scanning, and security gates within CI/CD pipelines.
• Drive software supply chain security, including dependency risk management, SBOMs, package governance, and AI-assisted development risks.
• Establish code signing and artifact integrity across Android applications, firmware, BSP images, containers, payment applications, and release artifacts.
• Strengthen AWS cloud security, including IAM, least privilege, MFA, encryption, network controls, logging, WAF, and security guardrails.
• Improve container security, including hardened base images, vulnerability management, registry controls, and lifecycle management.
• Lead Android/AOSP security activities, including CVE remediation, SELinux, Verified Boot, keystore/key attestation, and platform hardening.
• Own vulnerability management across device, cloud, and payment environments, including prioritization, remediation SLAs, and validation.
• Lead threat modeling, secure design reviews, penetration-test remediation, and security assessments.
• Support security requirements related to PCI, EU RED/EN 18031, EU CRA, ETSI EN 303 645, NIST, and OWASP.
• Develop security metrics and provide technical reporting on vulnerabilities, remediation, control coverage, exceptions, and security risk.
• Serve as a technical escalation point for release-blocking security findings and certification concerns.
• Represent Software Engineering in security governance, audits, customer security discussions, and third-party assessments.
• Provide security guidance, secure coding support, and technical coaching to engineering teams.

Minimum Qualifications

• Bachelor’s degree in computer science, Computer Engineering, Information Security, or a related technical field.
• 8+ years of experience in security engineering, software engineering, platform engineering, product security, or a related field.
• Hands-on experience integrating SAST/SCA and security tooling into CI/CD pipelines and driving remediation with development teams.
• Strong working knowledge of AWS security, including IAM, networking, encryption, logging, and cloud security posture management.
• Practical experience with Docker, Kubernetes, and container security.
• Ability to read and review code in at least two languages such as Java, Kotlin, C/C++, Python, Go, or Shell.
• Working knowledge of CVE/CVSS, vulnerability management, threat modeling, and secure software development.
• Understanding of cryptography, PKI, TLS, certificates, and key management.
• Demonstrated ability to influence and drive security outcomes across teams without direct authority.

Preferred Qualifications

• Experience implementing code signing across firmware, mobile, and container artifacts.
• Android/AOSP security experience, including SELinux, Verified Boot, keystore, BSP, or platform security.
• Experience with SBOM and software supply chain security, including SPDX/CycloneDX and tools such as JFrog Curation or Dependency-Track.
• Experience with security platforms such as Cycode, SonarQube, Fortify, Checkmarx, GitHub Advanced Security, Black Duck, Snyk, or Mend.
• Experience with hardened container images such as Chainguard.
• Knowledge of PCI-SSF, PCI-PTS, EU CRA, EU RED/EN 18031, ETSI EN 303 645, or IEC 62443.
• Familiarity with OWASP Top 10, OWASP Mobile Top 10, OWASP SAMM, and NIST secure development practices.
• Security certifications such as CISSP, CSSLP, OSCP, GIAC, or AWS Security Specialty.
• Experience working within an enterprise security governance model where enterprise teams establish security guardrails and business units drive implementation.

What Success Looks Like

In this role, you will help Elo move from reactive security remediation toward measurable, repeatable, engineering-driven security practices. Success includes stronger security controls, reduced vulnerability exposure, secure development pipelines, improved cloud and device security, reliable software supply chain controls, and demonstrable compliance with customer and regulatory requirements.

Physical Demands

• Ability to lift up to OSHA single person lift requirements
• Ability to sit, stand, bend, or walk for prolonged periods of time
• Ability to travel domestically and internationally
• Must be able to work a standard full-time schedule