Senior Manager, Product Security Engineering

Johnson Controls, Inc.; Westford (MA); Hybrid; USD 116,000 - 170,000; Full time

Job summary

Johnson Controls Fire Solutions is seeking a strategic and technical Manager, Product Security Engineering to lead security across a global portfolio of life-safety products, including embedded firmware, cloud platforms, and IoT solutions.

The role partners with Global Cybersecurity to implement security strategy, standards, governance, and risk management, driving secure-by-design practices and a mature DevSecOps ecosystem. Hybrid work at the Westford office is expected three days a week.

Qualifications

• Bachelor’s degree in computer science, cybersecurity, engineering, information technology, or related technical discipline.
• 10+ years of combined experience in software engineering, cloud engineering, DevSecOps, product security, application security, or cybersecurity leadership roles.

Responsibilities

• Define and advance the Fire Solutions product security execution strategy and roadmap.
• Lead governance processes across the product development lifecycle.
• Drive SSDLC adoption and secure development practices.
• Oversee vulnerability management, incident response, and remediation activities.
• Establish scalable security processes and measure program effectiveness.

Skills

Leadership

Cross-functional collaboration

DevSecOps

Security architecture

Executive communication

Education

Bachelor’s degree in computer science, cybersecurity, engineering, or related field

Master's degree in Cybersecurity, Computer Science, Engineering, Business, or related field

Job description

Johnson Controls Fire Solutions is seeking a strategic and technical Manager, Product Security Engineering to lead security across a global portfolio of life-safety products, including embedded firmware, cloud platforms, and IoT solutions.

The role partners with Global Cybersecurity to implement security strategy, standards, governance, and risk management, driving secure-by-design practices and a mature DevSecOps ecosystem. Hybrid work at the Westford office is expected three days a week.