Product Security Engineer
$122,800–$184,200 year
HybridLincolnshire, Illinois, United States
Job Summary
Embed security into the development lifecycle for thermal printers and barcode scanners by conducting threat modeling, performing penetration testing, and enforcing security controls throughout the secure software development lifecycle. Collaborate with hardware, firmware, and software engineering teams to integrate security requirements without compromising functionality, while responding to and leading remediation of product security vulnerabilities and incidents. Serve as the primary technical contact for customer security questionnaires, audits, and inquiries, and deliver security training to foster a culture of awareness. Mentor junior engineers, manage security tools within the CI/CD pipeline, and align with corporate teams to adapt security policies. Maintain detailed documentation of security architecture and best practices while staying current on IoT and embedded system threats.
Required Qualifications
- Bachelor's degree in Computer Science, Computer Engineering, Cybersecurity, or a related technical discipline
- 6+ years of experience
- Hands-on experience in product security, embedded systems security, or a closely related field
- Hands-on experience securing embedded systems, software, or IoT devices
- Location- ***Role is required to be onsite in Lincolnshire, IL office (Hybrid- Minimum of 3 days in the office per week)
Desired Qualifications
- Master's degree in a relevant engineering or cybersecurity field
- Proven experience integrating security into the CI/CD pipeline and product development lifecycle
- Proficiency in one or more programming languages such as C, C++, Python, or Java
- Deep technical expertise in Hardware Security (e.g., TPM, TrustZone, secure boot, tamper resistance, cryptography)
- Experience specific to IoT, connected devices, or automatic identification and data capture (AIDC) technologies
- Familiarity with industry security standards and compliance requirements (e.g., IEC 62443, FIPS 140)
- Industry-recognized security certifications (e.g., CISSP, CSSLP, GSEC, or offensive security certifications)
- Strong communication skills with the ability to articulate complex security risks to both technical teams and executive leadership
- Security certifications such as CISSP, CSSLP, GSEC, or equivalent are a plus
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.