Vaga de parceiro

Embedded Security Engineer - Rio Grande / RS

Disponível para Assinantes

Salvar nos Favoritos

Compartilhe:

Detalhes da Vaga

Escolaridade Não Informado
Segmento Não Informado
Salário Não Informado
Área de AtuaçãoDiversos / Outros

O que você irá fazer

You will be a member of the Global Product Architecture Team, which comprises system architecture methodology experts who coordinate and drive the creation of deliverables for the Modular Product Architecture Project.
You will collaborate closely with key stakeholders from R&D, PLM, PSM, MFG, and Field/Sales, as well as experts in all product areas, to standardize key module interfaces to minimize rework when module implementation changes.
You will also participate in the Product Architecture Update Process, which establishes the methodology and standard work for updating the architecture and standard interfaces.
This activity is a high priority for our company, as it will enable R&D efficiency and cost reduction for all elevator products.
We are looking for a DevSec Specialist to establish and drive a security-first culture in two embedded software development teams that are part of a global cluster responsible for digital elevator solutions.
This role will be instrumental in integrating security into all stages of the development lifecycle, ensuring compliance with industry regulations, and implementing tools and best practices for secure development.
Key Responsibilities:Security Culture & Awareness: Lead the adoption of DevSec principles in the teams, fostering a culture where security is a shared responsibility.
Secure Development Practices: Define and promote secure coding standards, threat modeling, and best practices for embedded systems security.
Tooling & Automation: Identify, propose, and implement security tools (e.
G.
, SAST, DAST, SCA, secrets management, CI/CD security integration) to support secure software development.
Compliance & Regulatory Alignment: Ensure that development practices adhere to elevator industry regulations and global security standards.
Vulnerability Management: Establish processes for identifying, assessing, and mitigating vulnerabilities in software components and third-party dependencies.
Embedded Systems Security: Work with teams to implement secure boot, firmware signing, and other embedded security techniques to protect software integrity.
Collaboration & Knowledge Sharing: Act as the security champion within the global development teams, providing guidance and training on security best practices.
Security Assessments: Lead assessment processes with specialized security vendors and evaluate the adoption of new security tools to enhance development practices.
Qualifications:Education:Bachelors or Masters degree in Computer Science, Cybersecurity, or a related field.
Experience:7+ years working as a software engineer for embedded systems, including SSDLC topics.
Proven experience leading highly technical projects.
Skills:Strong knowledge of security best practices for embedded software development (C/C++, Linux, Yocto, RTOS, etc.
).
Experience with security tools such as static and dynamic analysis (SAST/DAST), software composition analysis (SCA), and vulnerability management.
Understanding of cryptography, authentication mechanisms, and secure communication protocols (e.
G.
, TLS, MQTT security).
Knowledge of secure development frameworks (e.
G.
, OWASP, NIST Secure Software Development Framework).
Familiarity with compliance requirements for industrial and IoT security standards.
Experience working in a global development environment, collaborating with distributed teams across different time zones.
Strong communication and leadership skills to drive security awareness and training initiatives.
Familiarity with industrialization processes, certification standards, and global deployment of connected devices.
Soft Skills:Strong leadership and decision-making abilities, with an emphasis on technology adoption and strategic vision.
Highly collaborative with excellent organizational and interpersonal skills.
Ability to work in a fast-paced, global environment, managing multiple priorities and adjusting to shifting requirements.
Language:Proficient English communication skills, both written and spoken.
Preferred Qualifications:Masters degree in a relevant field (business, computer science, engineering, etc.
)Experience working in a global environment with cross-functional teams.
Experience in security for IoT or industrial systems.
Hands-on experience with CI/CD security integration and DevOps security practices, preferably with Bamboo.
Knowledge of container security (e.
G.
, Docker, Kubernetes).
Previous experience in a role focused on DevSecOps implementation.
TK Elevator is proud to be an equal opportunity workplace.
We are committed to equal employment opportunities regardless of race, ethnicity, gender, religion, sexual orientation, disability status or age.
#J-18808-Ljbffr

Informações Adicionais

Quantidade de Vagas 1
Jornada Não Informado

Vaga Encerrada

Embedded Security Engineer - Rio Grande / RS

Detalhes da Vaga

O que você irá fazer

Informações Adicionais

Envie esta vaga para um amigo!

Cadastro Inicial

Acesse sua Conta

Recuperação de Dados de Acesso