Product Security Software Engineer

Software Engineer (Product/Equipment Security)

Background

This client is seeking a hands-on Software Engineer to embed directly within their software engineering teams and drive secure development practices across hardware-integrated OEM products. This role focuses on product security, ensuring that internal and customer-facing systems are designed, built, and validated with security at the code and system level.

Project

The engineer will work alongside software and systems teams to secure OEM product stack, including hardware control software and embedded/OS-level applications. This includes implementing secure coding practices, performing vulnerability analysis, and supporting threat modeling across complex engineering systems.

This is not an IT/security operations role—the focus is on securing software products, not enterprise networks.

Key Responsibilities

• Partner directly with software engineers to implement secure coding practices
• Conduct threat modeling across product architectures (hardware + software systems)
• Perform static and dynamic code analysis (SAST/DAST) and software composition analysis (SCA)
• Identify and remediate vulnerabilities at the code and system level
• Design and build security tools, automation, and frameworks
• Support incident response and root cause investigations
• Help define and roll out a secure SDLC across engineering teams
• Contribute to internal cybersecurity training and awareness initiatives

Required Skills

• 5+ years of experience in cybersecurity within a software engineering environment
• Strong understanding of product/application security (not IT/network security)
• Cybersecurity on semiconductor equipment or various equipment
• Hands-on experience with:
• Threat modeling
• Vulnerability analysis
• Static/Dynamic code analysis
• Penetration testing
• Proficiency in at least one:
• C, C++, or C#
• Experience working directly with developers in a code-first environment
• Strong debugging, troubleshooting, and problem-solving skills
• Familiarity with source control and software development workflows

Nice to Have

• Background in embedded systems, hardware control, or operating systems
• Experience securing Semiconductor, industrial, robotics, or equipment-based products
• Exposure to secure boot, firmware security, or low-level system security
• Prior experience building or automating security tooling