Product Security Leader
TE Connectivity7 hours ago
Bengaluru, IndiaStaff+
Responsibilities
- Define and lead the business unit’s product cybersecurity strategy, policies, standards, governance model, and secure design principles.
- Integrate cybersecurity into all phases of new product introduction and enforce secure coding, threat modeling, design review, and security-by-design practices.
- Assess attack vectors and conduct product-level threat modeling and risk assessments across embedded firmware, ASIC/FPGA interfaces, high-speed data paths, and external interfaces.
- Establish static and dynamic code analysis, penetration testing, firmware security validation, hardware security validation, vulnerability disclosure, and remediation processes.
- Define cybersecurity requirements for suppliers and assess third-party and open-source components for security risks.
- Collaborate with architects to implement secure communication protocols, encryption, authentication, key management, secure boot, firmware integrity, and secure update mechanisms.
- Develop product cybersecurity incident response plans and support investigations, customer coordination, and internal response during security events.
- Ensure products meet applicable cybersecurity regulations and standards and support audits, certifications, and customer security assessments.
- Train engineering and product teams on secure design practices and advise technical and executive leadership.
Requirements
- Bachelor’s or master’s degree in computer engineering, electrical engineering, cybersecurity, or a related field.
- 10+ years of cybersecurity experience with a strong emphasis on embedded systems and/or hardware-integrated products.
- Experience implementing secure development lifecycle practices and knowledge of secure development lifecycle frameworks.
- Technical expertise in embedded systems security, firmware, RTOS, low-level software, ASICs, FPGAs, side-channel risks, secure elements, cryptography, secure boot, authentication protocols, high-speed network and data path security, vulnerability assessment, penetration testing, secure firmware updates, and key management.
- Knowledge of product security standards relevant to data center and networking environments and Zero Trust Architecture concepts.
- Knowledge of ISO/IEC 27001:2022, ISO/IEC 27017/27018, NIST Cybersecurity Framework 2.0, NIST SP 800-53, SOC 2 Type II, and ANSI/TIA-942.
- Experience in high-speed electronics, data center infrastructure, networking products, data center architecture, connectors, wire harnesses, busbars, high-speed connectivity products, high voltage, electronics, measurement and signal processing is preferred.
- Strong cross-functional leadership, influence without direct authority, communication with technical and executive audiences, analytical problem-solving, and prioritization skills.
- Willingness to travel as required.
Benefits
- Travel is expected at approximately 30%.
About TE Connectivity
TE Connectivity designs and manufactures connectors, sensors, and interconnect systems used by automotive, industrial, energy, aerospace, data center, and medical OEMs. It sells these components and related engineering services to equipment makers and system integrators worldwide, supporting applications from e-mobility and factory automation to communications infrastructure. The company is publicly traded as TE Connectivity plc (NYSE: TEL) and was previously known as Tyco Electronics after its 2007 separation from Tyco International.