Product Security Engineer Lead

1 month ago


Pittsburgh, United States TeleTracking Technologies, Inc. Full time
Job DescriptionJob Description

Product Security Engineer - Lead

Job Summary

The Lead Product Security Engineer will work closely with software development teams to build secure products, ensuring security controls are available by default, and educating stakeholders on best practices and standards. You will be focused on areas such as Application Security, Vulnerability Management, Secure Architecture and Coding, Penetration Testing and Cloud Security. The Lead Product Security Engineer will also participate in security reviews and threat modeling exercises. As the Lead Product Security Engineer, you will play a key role in finding creative ways to solve complex problems using an automation first mindset.

Primary Duties and Responsibilities:
  • Conduct thorough technical security assessments, perform security architecture reviews, threat modeling, and vulnerability assessments, and provide expert security opinion to minimize risk in TeleTracking’s products and SDLC.
  • Perform vulnerability and penetration testing, emphasizing automation for testing and remediation.
  • Drive healthcare regulatory compliance with product, platform, and development lifecycles.
  • Perform security log analysis and security alert analysis; perform risk assessments.
  • Partner with software development teams to identify and solve complex security problems.
  • Maintain and create secure development practices and programs for our software development teams.
Education:
  • Degree in Information/Cybersecurity, Computer Science, or equivalent.
  • Security certification(s) such as CISM, CySA, PNPT, Pentest+, CEH, CISSP are a plus.
Experience:
  • 7+ years of cybersecurity experience with a deep background in application programming.
  • 5+ years of software development experience with a security focus.
  • Technical and analytical expertise, including threat modeling, vulnerability testing, cryptography, and proficiency in software development (Java, JavaScript, Python, C#/.NET, Go(Golang), etc.).
  • Strong experience penetration testing application vulnerabilities using a variety of methods, including development of exploits.
  • Experience with AWS cloud security technologies.
  • Experience with containerization and container security.
  • Experience in implementing, using, and managing Infrastructure as Code tools.
  • Experience with identifying and supporting the remediation of software supply chain risks.
  • Experience in implementing, using, and managing application security testing tools.
  • Experience in devops and software engineering.
  • Familiarity with commonly used secure software development lifecycle maturity frameworks.
Skills:
  • Strong understanding of web application security, secure software design, and secure coding practices.
  • Strong understanding of secure architecture and development concepts.
  • Proficiency in designing and implementing security controls for microservices, such as API gateways, service meshes, and container security.
  • Strong in both upward and downward communication of security updates and reports.
  • Familiarity with OWASP Top 10 and CWE Top 25 Most Dangerous Software Weaknesses.
Work Environment:

The work environment characteristics described here are representative of those an employee encounters while performing the essential functions of this job. Reasonable accommodation may be made to enable qualified individuals with disabilities to perform the essential functions. The term "qualified individual with a disability" means an individual with a disability who, with or without reasonable accommodation, can perform the essential functions of the position.

While performing the duties of this job, the employee is regularly required to communicate professionally in person, over the telephone, through email and other electronic means, move about the office, handle various types of media and equipment, and visually or otherwise identify observe and assess. The employee is occasionally required to lift up to 10 pounds unless otherwise specified in the job description.

TeleTracking has a COVID-19 vaccination policy which mandates vaccination for certain positions or an approved exemption due to religious or medical reasons. Any accommodation request will be objectively considered in accordance with the Federal, State, and Local laws on a case-by-case basis.

TeleTracking is committed to providing equal employment opportunity to all people in all aspects of the employment relationship, without discrimination because of race, age, sex, color, religion, national origin, disability or status as a Vietnam era or special disabled veteran or any other unlawful basis, as defined by applicable law, and fostering a workplace free of unlawful discrimination and retaliation. This policy affects decisions including, but not limited to, hiring, compensation, benefits, terms and conditions of employment, opportunities for promotion, transfer, layoffs, return from a layoff, training and development, and other privileges of employment.

An integral part of TeleTracking’s commitment is to comply with all applicable federal, state, and local laws concerning equal employment and affirmative action.



  • Pittsburgh, Pennsylvania, United States TeleTracking Technologies, Inc. Full time

    Job OverviewThe Lead Engineer for Product Security will collaborate closely with software development teams to create secure products, ensuring that security measures are integrated by default, while also educating stakeholders on best practices and compliance standards.Key Responsibilities:Conduct comprehensive technical security evaluations, perform...


  • Pittsburgh, Pennsylvania, United States Vantage Point Recruiters, LLC. Full time

    Lead Welding Engineer, ProductionLocation: Pittsburgh, PARelocation Assistance: AvailableAttractive Compensation Package [approximately $136K] – Comprehensive Benefits, Prestigious Global OrganizationAs a LEAD Welding Engineer, you will play a pivotal role in the advancement and oversight of the materials joining strategies and protocols.Key...


  • Pittsburgh, Pennsylvania, United States IRALOGIX,Inc Full time

    Job DescriptionCompany OverviewIRALOGIX, Inc. is a leading provider of institutional technology platforms, specializing in retirement services and FinTech software solutions.Job SummaryWe are seeking a highly skilled Principal Security Engineer to join our team. As a key member of our security organization, you will be responsible for mitigating risks across...


  • Pittsburgh, United States Innovation Works Full time

    Product Engineer / Manager Job Description About Us Immobileyes is a start-up developing a new laser-based security device aimed at multiple markets including home / commercial security, law enforcement and the military. The innovative technology uses multiple low power lasers to cause temporary visual disruption, giving users a new tool to deter intruders...

  • Product Engineer

    5 days ago


    Pittsburgh, Pennsylvania, United States Innovation Works Full time

    About Innovation WorksInnovation Works is a cutting-edge technology company developing a revolutionary laser-based security device. Our innovative technology uses multiple low-power lasers to cause temporary visual disruption, providing users with a new tool to deter intruders and potentially aggressive suspects.Job DescriptionWe are seeking a highly skilled...


  • Pittsburgh, United States Innovation Works, Inc. Full time

    Job DescriptionJob DescriptionProduct Engineer / Manager Job DescriptionAbout UsImmobileyes is a start-up developing a new laser-based security device aimed at multiple markets including home / commercial security, law enforcement and the military. The innovative technology uses multiple low power lasers to cause temporary visual disruption, giving users a...


  • Pittsburgh, Pennsylvania, United States PNC Financial Services Group Full time

    Job OverviewPosition SummaryAt PNC Financial Services Group, we recognize that our workforce is our most valuable asset and a key factor in our competitive edge. We are committed to creating an inclusive environment where every employee feels appreciated, respected, and empowered to contribute to our collective success. As a Senior Security Engineer...


  • Pittsburgh, United States Eliassen Group Full time

    Job DescriptionJob DescriptionOur client, a leader in the financial services industry, has an excellent opportunity for a Mainframe Security Engineer to work on a 12-month contract-to-hire position in Pittsburgh, PA, or Orlando, FL. The pay rate is $66/hour w-2. This position is available for W-2 only. Candidates must be local or willing to relocate to...


  • Pittsburgh, United States Eliassen Group Full time

    Our client, a leader in the financial services industry, has an excellent opportunity for a Mainframe Security Engineer to work on a 12-month contract-to-hire position in Pittsburgh, PA. The pay rate is $66/hour w-2. This position is available for W-2 only. Candidates must be local or willing to relocate to Pittsburg, PA or Orlando, FL as the position is...


  • Pittsburgh, United States Eliassen Group Full time

    Our client, a leader in the financial services industry, has an excellent opportunity for a Mainframe Security Engineer to work on a 12-month contract-to-hire position in Pittsburgh, PA. The pay rate is $66/hour w-2. This position is available for W-2 only. Candidates must be local or willing to relocate to Pittsburg, PA or Orlando, FL as the position is...


  • Pittsburgh, Pennsylvania, United States Xylem Full time

    Join our team as a Product Security Specialist At Xylem, a leading global water technology firm, we are committed to tackling the world's most pressing water challenges. As a Product Security Specialist, you will be instrumental in developing and executing security initiatives that align with our organizational objectives. Collaborating closely with software...


  • Pittsburgh, United States Eliassen Group Full time

    We can facilitate w2 consultants. For our w2 consultants, we offer a great benefits package that includes Medical, Dental, and Vision benefits, 401k with company matching, and life insurance.Rate: $60 - $65 / hr. w2Job Description:We are seeking a skilled and dedicated Mainframe Security Engineer to join our team. The ideal candidate will be responsible for...


  • Pittsburgh, United States Eliassen Group Full time

    We can facilitate w2 consultants. For our w2 consultants, we offer a great benefits package that includes Medical, Dental, and Vision benefits, 401k with company matching, and life insurance.Rate: $60 - $65 / hr. w2Job Description:We are seeking a skilled and dedicated Mainframe Security Engineer to join our team. The ideal candidate will be responsible for...


  • Pittsburgh, United States IRALOGIX,Inc Full time

    Job DescriptionJob DescriptionCompany: IRALOGIX, Inc.Position: Principal EngineerLocation: Pittsburgh, PA / Charlotte, NC Job Type: Full-Time/ExemptIndustry: Retirement Services/FinTech SoftwareTravel: 0%-5%IRALOGIX is a high-growth, institutional technology platform focused on providing uniquely capable solutions to IRA providers, 401(k) recordkeepers,...


  • Pittsburgh, Pennsylvania, United States General Dynamics Mission Systems Full time

    Reference #:Basic Qualifications Education Requirements: Requires a Bachelor's degree in Software Engineering, or a related Science, Engineering or Mathematics field. Also requires 8+ years of job-related experience, or a Master's degree plus 6 years of job-related experience. Agile experience preferred.Clearance Requirements:Department of Defense TS/SCI...


  • Pittsburgh, Pennsylvania, United States Thermo Fisher Scientific Full time

    Job Summary:We are seeking a highly skilled Cybersecurity Specialist to join our team at Thermo Fisher Scientific. As a key member of our security team, you will be responsible for ensuring the security and integrity of our web presence.Key Responsibilities:Conduct thorough reviews of our websites to ensure compliance with corporate security standards and...

  • Lead Data Engineer

    1 month ago


    Pittsburgh, United States Innovation Works, Inc. Full time

    Job DescriptionJob DescriptionHandl Health - Lead Data Engineer About the Role We are seeking an experienced Lead Data Engineer to join our team of world-class software engineers. In this role, you will be responsible for leading a team, being hands-on writing code, and collaborating across teams.ResponsibilitiesBe the owner of an ever-increasing...


  • Pittsburgh, Pennsylvania, United States Curtiss-Wright Full time

    Position Overview:We are seeking a dedicated Production Systems Engineer to join our dynamic team. This role is crucial in enhancing our manufacturing capabilities and ensuring the delivery of high-quality products.Key Responsibilities:- Collaborate with team members to design, integrate, and optimize manufacturing systems and processes.- Analyze production...

  • Lead Cloud Engineer

    1 month ago


    Pittsburgh, Pennsylvania, United States Ivalua Full time

    Lead Cloud Engineer (Senior Cloud Architect and Infrastructure Engineer)This is an exciting opportunity for an IT Architect with solid experience in Azure to directly support and provide a full range of infrastructure architecture, engineering support and FedRAMP compliance. Office Locations:NYC, NYPittsburgh, PAFremont, CA About IvaluaIvalua is developing a...


  • Pittsburgh, United States Canonical - Jobs Full time

    Job DescriptionJob DescriptionWe have opened several senior/staff Security Operations Engineer (SOC) positions, creating a new team reporting to the CISO. We are looking for a range of experience in these positions - at the high end we are looking for deep experience defending highly contested critical assets and high-value cyber targets against advanced...