Advanced Embedded Security Engineer

About the role

The Advanced Engineer Security plays a crucial role within the Advanced Data Capture (ADC) product security team. They are responsible for ensuring a Secure Development Lifecycle (SDLC) is defined, applied, followed, and maintained across all ADC product development in compliance with corporate cyber security policies, procedures, and initiatives.

Responsibilities

• Define product security framework, policies, processes, & procedures
• Working with embedded devices doing firmware development
• Facilitate and lead BU security efforts by participating in daily agile stand-ups and driving security best practices across the business unit
• Partner with scrum teams for secure software solution architecture
• Support quarterly SAMM self-assessments (set goals, report status, support audits)
• Seek ways to apply new security technology to and reuse existing security technology in support of BU’s business strategy
• Perform threat analysis and risk assessments
• Design security controls, monitoring, and scanning tools
• Support and guide engineering with the Secure Development Lifecycle (SDLC) workflow across ALL products
• Compile and approve the security checklist for release of milestones
• Support penetration testing efforts
• Manage incident responses
• Aid in the development and review of product security documents
• Deliver Security DevOps with different scrum teams and plan user stories for sprints while addressing requirements and orchestrating security impact
• Develop and maintain best practices for deploying desktop, native, web and service-based applications in Linux, Windows and other environments

Requirements

• Bachelor's degree required
• 8+ years of experience
• Verifiable years of experience in enterprise software security
• Performing threat analysis and risk assessments
• Designing and developing security controls
• Vulnerability Management experience

Preferred Qualifications

• Proven experience in product security for embedded systems, consumer electronics, or IoT devices
• Full stack software security, Information Security, DevSecOps Certifications, Cloud Security, CISSP certification
• Vulnerability management tool experience
• Security standards compliance and regulations
• Cloud security experience
• SAMM or BSIMM experience
• Cryptographic standards understanding/knowledge
• Incident response experience
• Disaster Recovery Planning and implementation experience
• Effective verbal and written communication skills

Benefits

Equal Opportunity Employer. Zebra is committed to providing a benefits program that is comprehensive and competitive – including healthcare, wellness, inclusion networks, and continued learning and development offerings. We offer community service days, in addition to the traditional insurances, compensation, parental leave, employee assistance program and paid time off offerings depending on the country where you work.

Pay

$122,800.00 - $184,200.00 Annual Incentive Compensation In addition to base pay, Zebra offers this role the opportunity to earn a performance-based annual cash incentive, at a target equal to 12% of base pay, in accordance with the terms of the applicable incentive plan.

Contact Information

If you have any questions or need further information, please contact us at workplace.accommodations@zebra.com. For more details on our AI technology used in hiring, visit our AI Technology Statement. For information on our Equal Opportunity Employer policy, visit our Equal Opportunity Employer statement. For details on our privacy policy, visit our Zebra Privacy Policy. For information on our EEOC Know Your Rights, visit Know Your Rights. For information on our Pay Range, visit Pay Range.