Senior Security Engineer, Product & App Security

Vernovis, Ltd.; Westerville (OH); On-site; USD 130,000 - 155,000; Full time

Job summary

Vernovis, Ltd. in Westerville, OH is seeking a Senior Engineer, Application and Product Security to lead certification efforts and secure software development initiatives across products.

You will collaborate with engineering, security, and business teams to map requirements to frameworks and drive secure design and implementation. The role emphasizes hands-on security control catalogs, cross-functional communication, and alignment with NIST OSCAL and industry standards to support customer

Qualifications

• Bachelor's degree in IT, CS, Engineering, or related field.
• 7+ years in IT, Engineering, or Security including 3+ years in Product Security.
• Experience with security frameworks and certification efforts (IEC 62443, NIST, ISO 27001, FedRAMP, SOC 2).

Responsibilities

• Support product security certification activities across IEC 62443, ISO 27001, SOC 2, FedRAMP, NIST, and related standards.
• Maintain SSDF alignment with evolving standards, regulations, and best practices.
• Map regulatory obligations into security requirements with traceability.
• Manage security requirement changes via Git/GitLab, including branching and MR reviews.
• Collaborate with Engineering, IT, GRC, Procurement, and Supply Chain to implement security requirements.
• Support customer security questionnaires and certification documentation.

Skills

Security requirements mapping

Cross-functional collaboration

Stakeholder management

Technical communication

Education

Bachelor's degree in IT / Computer Science / Engineering

Tools

Git

NIST OSCAL

JSON

YAML

Job description

Vernovis, Ltd. in Westerville, OH is seeking a Senior Engineer, Application and Product Security to lead certification efforts and secure software development initiatives across products.

You will collaborate with engineering, security, and business teams to map requirements to frameworks and drive secure design and implementation. The role emphasizes hands-on security control catalogs, cross-functional communication, and alignment with NIST OSCAL and industry standards to support customer