• 5+ years of experience in product or cybersecurity security engineering role
• Demonstrated experience in product security engineering with a focus on application and backend security, preferably in the automotive industry
• Strong architectural review skills with the ability to provide guidance and review development efforts across different teams
• Ability to conduct thorough vendor security assessments to ensure the integrity of third-party software components
• Excellent communication and collaboration skills to effectively engage with internal teams and external stakeholders
• MS/BS degree in Computer Science, Engineering or equivalent
• Applicants will be required to be fully vaccinated against COVID-19 upon commencing employment

Desirable

• Applied is looking for a multifaceted Product Security Engineer who can play a crucial role in ensuring the security and integrity of our products, particularly focusing on Over-The-Air (OTA) updates, remote command execution, key provisioning, and certificate management
• You will collaborate closely with cross-functional teams to design, implement, and maintain security measures that protect our applications and devices from vulnerabilities and unauthorized access
• Drive the implementation of new security features such as remote command signing, secured Over-The-Air (OTA) updates, key provisioning, and certificate provisioning to bolster the security of our automotive systems
• Collaborate with development teams to architect and review the implementation of security features in automotive applications and backend systems, ensuring adherence to best practices
• Assist in triaging vulnerabilities reported by various sources, including internal security assessments, external researchers, and bug bounty programs, to prioritize remediation efforts effectively
• Conduct thorough assessments of third-party vendors and suppliers to evaluate their security posture and ensure the integrity of software components integrated into our automotive systems
• Provide guidance and support to cross-functional teams during the development lifecycle, offering expertise in security considerations and best practices