Senior Manager, Product Security Office

APTIV INDIA; Boston (MA); Híbrido; USD 180.000 - 240.000; Tempo integral

Resumo da vaga

Wind River Systems is seeking an experienced Secure Software Engineering professional to lead and manage the Product Security Office to scale trust in our product security to meet increasing business and security technology needs.

This role will grow a mature product security team, architect and mobilize product security trust initiatives, manage customer product security trust, and lead the Product Security Incident Response Team (PSIRT) and vulnerability management.

Qualificações

• 10+ years in software engineering, program management, governance, or related leadership roles.
• 5+ years of people management experience leading technical, compliance, or program teams.
• Direct experience with security standards/certifications/frameworks like FIRST.org, OWASP SAMM, IEC 62443, ISO 21434, NIST 800-218, FIPS 140-3, DISA STIG, Common Criteria, CMMC, Fed Ramp, or similar.
• Broad practical experience with the NIST 800 series (800-53, 800-171, etc.).

Responsabilidades

• Lead and grow the Product Security Office and team.
• Architect the product security trust roadmap and scale the compliance framework.
• Empower product security compliance across engineering and cross-functional teams.
• Empower product security champions throughout product software engineering.
• Architect and lead execution of organization-wide product security platforms.
• Lead the Product Security Incident Response Team (PSIRT).
• Manage customer product security trust and compliance.
• Mentor development teams to follow secure development practices.

Conhecimentos

Leading software product security team

Threat modeling

Security testing

Vulnerability management

Software engineering

Cross-functional leadership

Formação

Bachelor's degree in Engineering, Computer Science, Information Security, or related field

Descrição da vaga

Senior Manager, Product Security Office

Hybrid On-Site: Walnut Creek, CA; Austin, TX; Troy, MI; Boston, MA; Kanata, Ontario, Canada

Citizenship: USA National or Canada Citizen, without citizenship of another country

ABOUT WIND RIVER

Wind River is a global leader in delivering software for mission-critical intelligent systems. For more than four decades, the company has been an innovator and pioneer, powering billions of systems that require the highest levels of security, safety, and reliability. Wind River helps customers across automotive, aerospace, defense, industrial, medical, and telecommunications industries solve complex technology challenges on their journey toward the new intelligent machine economy. The company's software powers generation after generation of the safest, most secure systems in the world. Examples include playing a key role in NASA space missions such as Artemis I, the James Webb Space Telescope, and multiple Mars rovers. We've achieved recent 5G milestones including the world's first successful 5G data session with Verizon and building one of the largest Open RAN networks in the world with Vodafone. The company has received industry recognition for its technology innovation and leadership, and for its workplace culture, including global Great Place to Work certification and being named a "Top Workplace" for ten consecutive years. If you want to be part of a unique culture where the lived experience is based on our cultural attributes of growth mindset, customer-focus, and diversity, equity, inclusion & belonging, come join us and help advance the future software defined world.

Role Summary

Wind River Systems is seeking an experienced Secure Software Engineering Professional to lead and manage the Product Security Office to scale trust in our product security to meet increasing business and security technology needs. This position will lead and grow a mature product security team while architecting and mobilizing product security trust initiatives, manage customer product security trust, and lead the product security incident response (PSIRT) and vulnerability management team.

The successful candidate will have experience in software security techniques, broad-based security standards and regulatory experience, and have mature cross-functional leadership, teamwork, and communications capabilities.

Interface & Collaboration

The successful candidate will work and collaborate with customer, product, engineering, and operations teams to ensure high levels of product security trust with a scalable, compliance-driven mindset, across all products.

Your Role

• Manage, Lead, and Grow the Product Security Office and Team


• Architect the product security trust roadmap and scale the compliance framework to meet emerging and future business priorities.


• Empower product security compliance across engineering and aligned to the CTO Office, Product Management, IT, Legal, InfoSec, and SecOps.


• Empower product security champions throughout product software engineering.


• Architect, and lead execution of organization-wide product security assurance software platforms.


• Lead the Product Security Incident Response Team (PSIRT) operations team.


• Manage customer product security trust and compliance.


• Training, mentoring, and supporting development teams to follow secure development values, principles, and practices.

Your Background

Core Competencies & Demonstrated Success

• Experience Leading Software Product Security Team(s).


• Direct experience with product security assurance techniques including Threat Modeling, Security Testing, Vulnerability Management, Software Composition, etc.


• Experience in software engineering models and techniques.


• Experience empowering product security compliance broadly across an organization.


• Broad-based experience with global security regulations, frameworks, and standards.


• Exposure to customer compliance and remediations (Questionnaire's, Audits, Contracts, etc.)


• Excellent verbal and written, management level and customer communication skills.


• Ability to analyze and think quickly and to resolve conflict.


• Strong communication, interpersonal, and mentoring skills.
  
• Ability to work effectively across the organization.


• Ability to adapt to a changing environment.

Qualifications

• Bachelor's degree in Engineering, Computer Science, Information Security, or a related technical field.


• 10+ years of experience in software engineering, program management, governance, compliance, or related leadership roles.


• 5+ years of people management experience leading technical, compliance, or program teams.


• Direct experience mobilizing one or more security standards/certifications/frameworks like FIRST.org, OWASP SAMM, IEC 62443, ISO 21434, NIST 800-218, FIPS 140-3, DISA STIG, Common Criteria, CMMC, Fed Ramp, or similar.


• Broad practical experience with the NIST 800 series of security standards, including 800-53, 800-171, and others.


• Practical experi