Job Description
Salary: $118,969 - 160,959 per year Requirements:
- We require candidates to have a Bachelor’s degree in Cybersecurity, Computer Science, Electrical Engineering, or a related discipline. Candidates should possess over 5 years of experience in cybersecurity, with a minimum of 2 years dedicated to product or embedded system security. You must have experience working in Agile/Scrum environments and familiarity with DevSecOps practices. Proficiency in threat modeling, secure coding, and vulnerability management is crucial, along with hands-on experience with security tools such as SAST/DAST scanners, SBOM generators, and PKI systems. Familiarity with secure coding in C/C++, Python, Java, and embedded systems languages, as well as a solid understanding of secure boot, firmware signing, and TPM-based authentication is required. Experience with embedded Linux, Yocto, and real-time operating systems (RTOS) is preferred, as is familiarity with cloud-native security, API security, and IoT device protection. We expect a strong grasp of secure software development practices and common vulnerabilities (e.g., OWASP Top 10), alongside familiarity with CI/CD pipelines and DevSecOps practices. Relevant certifications, such as Certified Secure Software Lifecycle Professional (CSSLP) or Certified Information Systems Security Professional (CISSP), are favored. Strong communication and collaboration skills are essential for interacting with both technical and non-technical teams, along with the ability to lead cross-functional initiatives and promote cultural change around security.
Responsibilities: - In this role, you will establish and operationalize a formal Product Security Program aligned with corporate SDLC and Secure Design standards. You will collaborate with engineering, IT, and compliance teams to define and enforce security requirements across our product lines. Additionally, you will develop and maintain security policies, procedures, and technical standards for product development. Staying current with emerging security threats and corresponding mitigation techniques will be crucial as you continuously evolve our program and governance. You will lead and standardize threat modeling activities utilizing methodologies such as STRIDE, PASTA, or LINDDUN. Your responsibilities will also include assisting with security architecture reviews, standardizing documentation guidelines for data flows, trust boundaries, attack surfaces, and security controls. You will help operationalize a Secure Development Lifecycle with security tools and practices integrated into CI/CD pipelines. Ensuring secure coding practices are adhered to and validated through peer reviews and automated testing will fall under your responsibilities, along with supporting the development of secure signing, secure boot, and credential management processes. Providing guidance on secure coding practices, conducting security training for developers, assisting in the configuration of security tools, managing vulnerability tracking, and representing R&D in incident response planning and security investigations are also key duties of this position. You will be involved in security assessments, maintaining compliance with relevant standards, and interpreting evolving cybersecurity threats and regulatory changes to enhance our product security strategy.
Technologies: - API
- CI/CD
- Cloud
- DevSecOps
- Embedded
- Firmware
- IoT
- Java
- Linux
- Network
- OWASP
- Python
- Security
- DevOps
- Support
More:
Lincoln Electric stands as a leader in the engineering, design, and production of advanced arc welding solutions and automated systems. As the Welding Expert™, our expertise spans materials science, software development, automation engineering, and application expertise to elevate fabrication capabilities and contribute to a better world. Based in Cleveland, Ohio, we are a publicly traded company valued at $4.2B, employing over 12,000 individuals across 71 manufacturing and automation locations in 21 countries, supported by a robust global network of distributors and sales offices serving diverse customers around the world. We are committed to fostering an inclusive workplace and promoting equal employment opportunities for all applicants, regardless of race, color, national origin, religion, gender, age, veteran status, disability, and other protected categories under applicable laws.
last updated 39 week of 2025
Job Tags
Full time,