Product Security Leader (Remote)
TE Connectivity4 hours ago
Base Salary
$175k - $260k/yr
Responsibilities
- Define and lead the product cybersecurity strategy, governance model, policies, standards, and secure design principles for hardware, firmware, and embedded software.
- Integrate cybersecurity into the secure product development lifecycle and New Product Introduction process through secure coding standards, threat modeling, design reviews, and security requirements.
- Conduct product-level threat modeling and risk assessments across embedded firmware, ASIC/FPGA interfaces, high-speed data paths, and external interfaces.
- Establish vulnerability management, static and dynamic code analysis, penetration testing, security validation, vulnerability disclosure, and remediation processes.
- Define supplier and component security requirements, including assessment of integrated circuits, firmware, software, and open-source components.
- Guide secure architecture involving communication protocols, encryption, authentication, key management, secure boot, firmware integrity, and update mechanisms.
- Develop product cybersecurity incident response plans and support investigations of field incidents and potential breaches.
- Ensure compliance with cybersecurity regulations and standards and support audits, certifications, and customer security assessments.
- Drive cybersecurity awareness and secure design training across engineering and product teams while advising leadership as a subject matter expert.
Requirements
- Bachelor’s or master’s degree in Computer Engineering, Electrical Engineering, Cybersecurity, or a related field.
- 10+ years of cybersecurity experience with strong emphasis on embedded systems and/or hardware-integrated products.
- Experience with high-speed electronics, data center infrastructure, or networking products is strongly preferred.
- Proven experience implementing secure development lifecycle practices.
- Expertise in embedded systems security, firmware, RTOS, low-level software, ASICs, FPGAs, side-channel risks, secure elements, cryptography, secure boot, authentication protocols, network and data path security, vulnerability assessment, penetration testing, secure firmware updates, and key management.
- Knowledge of secure development lifecycle frameworks, product security standards for data center and networking environments, and Zero Trust Architecture concepts.
- Knowledge of ISO/IEC 27001:2022, ISO/IEC 27017/27018, NIST Cybersecurity Framework 2.0, NIST SP 800-53, SOC 2 Type II, and ANSI/TIA-942.
- Strong cross-functional leadership, communication, analytical, prioritization, and problem-solving abilities, including the ability to influence without direct authority.
- Knowledge of data center architecture, connectors, wire harnesses, busbars, high-speed connectivity products, high voltage, electronics, measurement, and signal processing is valued.
- Experience in product development for data center applications is valued.
- Willingness to travel approximately 30%.
Benefits
- Comprehensive benefits package including health insurance, 401(k), disability insurance, life insurance, employee stock purchase plan, paid time off, and voluntary benefits.
- Remote position with approximately 30% travel.
- Base salary range of $175,000–$260,000, commensurate with experience and subject to physical location and qualifications.
About TE Connectivity
TE Connectivity designs and manufactures connectors, sensors, and interconnect systems used by automotive, industrial, energy, aerospace, data center, and medical OEMs. It sells these components and related engineering services to equipment makers and system integrators worldwide, supporting applications from e-mobility and factory automation to communications infrastructure. The company is publicly traded as TE Connectivity plc (NYSE: TEL) and was previously known as Tyco Electronics after its 2007 separation from Tyco International.