Senior Product Security Engineer - Secure by Design (IoT & Cloud)

Brunswick; Northern (KY); Hybrid; USD 118,000 - 174,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

401k match

Paid vacation

Job summary

Brunswick is seeking a Senior Product Security Engineer to advance security across our product portfolio. You will partner with engineering, cloud, and DevSecOps teams to build secure by design systems and drive vulnerability management, secure coding, and testing practices.

The role requires strong communication skills, solid understanding of secure development lifecycle, and experience applying security standards such as OWASP Top 10 and ISO/SAE 21434. Hybrid work in the USA is supported.

Qualifications

• Bachelor’s degree in Electrical or Electronic Engineering, Computer Science, Software Engineering, Cybersecurity, or equivalent professional experience.
• 5+ years of experience in Product Security for IoT type devices and associated cloud/server systems.
• Fundamental understanding of product security standards (ISO/SAE 21434, IEC/ISA 62443, EU directives, or comparable).
• Experience performing product threat modeling and security risk assessments.

Responsibilities

• Lead product security initiatives and mature secure development practices across Brunswick's product portfolio.
• Conduct threat modeling, risk assessments, and recommend mitigating controls.
• Define and promote product security policies, standards, and technical guidance.
• Collaborate with multiple teams to embed security throughout the product lifecycle.

Skills

Product security

Threat modeling

Secure SDLC

OWASP Top 10

DevSecOps

Cloud security

Vulnerability management

Secure coding

Communication skills

Security standards

Education

Bachelor’s degree in engineering or CS

Tools

Veracode

GitHub Enterprise

Azure DevOps

Kubernetes

CI/CD

Job description

Brunswick is seeking a Senior Product Security Engineer to advance security across our product portfolio. You will partner with engineering, cloud, and DevSecOps teams to build secure by design systems and drive vulnerability management, secure coding, and testing practices.

The role requires strong communication skills, solid understanding of secure development lifecycle, and experience applying security standards such as OWASP Top 10 and ISO/SAE 21434. Hybrid work in the USA is supported.