Lead Security Engineer

About the Role

As a Lead Security Engineer, you will support software development teams in ensuring software security quality assurance. Your role involves overseeing adherence to the software security development lifecycle, compliance with regulations, and industry standards. Working within the software test and QA department, you will drive continuous enhancements to security processes, monitor software system health, and assist scrum teams with guidance.

This position operates in a collaborative and growth-oriented environment, embracing new methodologies to enhance team capabilities. You will develop security test strategies across various platforms including Lighting, Environmental products, Hair care, and Robotics. Comfortable engaging in high-level design discussions, you will bring a solid background in security testing and software verification techniques.

Key Responsibilities

• Execute, test, and maintain advanced software security measures aligned with technical reference architecture.
• Perform ongoing penetration testing and code reviews—both automated and manual—to uncover and address vulnerabilities in IoT consumer products.
• Develop and define penetration test methodologies, combining automation tools with manual techniques.
• Collaborate to establish desired security levels, assess requirements, and design appropriate tests.
• Create automated frameworks to support continuous testing and nightly build analysis.
• Participate in the design, development, integration, and deployment of offensive cyber operation tools targeting platforms and payloads.
• Identify security risks proactively and provide engineering solutions to mitigate vulnerabilities in new software.
• Work within a SAFe Agile team structure in a global organizational context.
• Advise development teams on secure coding practices.
• Stay updated with emerging tools and industry best practices.

Qualifications, Skills, and Behaviors

• Experience in cybersecurity domains such as penetration testing, security posture assessment, cloud and IoT security, vulnerability and risk analysis.
• Hands-on proficiency with scanning, attack, and assessment tools and tactics.
• Competency in at least one programming or scripting language—Python, C, or C++ preferred.
• In-depth understanding of wireless protocols including Wi-Fi and Bluetooth, as well as familiarity with JTAG and USB interfaces.
• Solid knowledge of security principles applicable to IoT, Linux, and real-time operating systems (RTOS).
• Experience with test management tools such as Jira, Confluence, Stash, Git, and Bamboo.
• Ability to contribute valuable input at all stages of feature design and development.
• Demonstrates persistence, a curious mindset, and is results-focused.
• Creativity and product-oriented thinking to generate innovative concepts.
• Minimum of three years in software quality assurance or relevant software testing roles.
• Bachelor’s degree in computer engineering, electronic engineering, or closely related disciplines.
• Familiarity with software components in IoT products encompassing embedded systems, applications, and cloud services.
• Experience working within regulated frameworks such as ISO, IEC, or FDA standards.
• Proven track record in Agile software development and DevOps environments.
• Strong attention to detail coupled with excellent communication skills and ability to work autonomously or in teams.
• Ability to operate effectively in dynamic, fast-paced environments while ensuring quality delivery with minimal supervision.
• Understanding of software security development lifecycle and statistical process control, including the capability to apply metrics and analytical methods to products and processes and convey findings.
• Advanced certifications such as CREST are advantageous.

Diversity and Inclusion

The company values diversity and is an equal opportunity employer. All applicants are considered regardless of race, color, religion, national or ethnic origin, sex, sexual orientation, gender identity or expression, age, disability, veteran status, or any other aspect of diversity.