Information Security Engineer, Advanced

Zebra Technologies is a community of innovators creating smart solutions for their customers. They are seeking an experienced Product Security Advanced Engineer to proactively reduce security risks across their product portfolio, partnering with development teams and managing security processes and policies.

Responsibilities:

• Executes security controls, defenses and countermeasures to intercept and prevent internal or external attacks or attempts to infiltrate company email, data, e-commerce and complex web-based systems
• Creates successful efforts to compromise systems security and designs countermeasures
• Manages audits hardware, software and network firewalls and encryption protocols
• Manages security policies to control physical and virtual access to systems
• Executes highly important information to management regarding the negative impact on the business caused by theft, destruction, alteration or denial of access to information and systems
• Internal or external, client-focused, working in conjunction with Professional Services and outsourcing functions
• Secure Software Development Leadership
• Partner with development teams to implement and evolve secure development practices across diverse tech stacks and platforms
• Champion security “shift-left” strategies by embedding secure coding practices early in the software development lifecycle
• Drive adoption of secure coding standards and create reusable baselines across repositories
• Vulnerability & Secrets Management
• Audit, assess, and drive remediation of vulnerabilities, with a particular focus on false positives and ignored issues
• Lead initiatives to identify and reduce secrets in code repositories, leveraging tools and automation wherever possible
• Tooling Ownership & Vendor Engagement
• Serve as a Zebra representative on the Change Advisory Boards (CABs) for key security vendors
• Maximize value from security tools by ensuring proper integration, configuration, and feature adoption
• Deliver briefings and feature updates to internal teams to keep them informed and engaged with evolving tool capabilities
• CI/CD and Automation Integration
• Design, assess, and enhance CI/CD pipelines with robust cybersecurity controls in mind
• Ensure security tools are effectively integrated into the software build and release process
• Asset & Policy Governance
• Contribute to asset tagging strategies through the creation and management of custom properties for application and code assets
• Collaborate with the Policy & Governance team to update and author product development security policies
• Cross-Functional Influence
• Communicate complex security concepts in a clear and effective manner to developers, leadership, and stakeholders
• Act as an internal consultant, trusted advisor, and technical mentor on application security best practices

Requirements:

• Bachelor's degree required
• 8+ years of experience
• Cyber Security experience
• Vulnerability management experience
• Tooling management (implementation & troubleshooting) experience
• Software development experience (coding) using Python, C++, C#
• Application security
• Product security
• Master's degree beneficial
• Experience working cross functionally
• Team player
• Proven ability to adjust to changes in priorities and manage multiple threads effectively and in a timely manner
• Demonstrated examples as a team player with ability to navigate organizational boundaries
• Strong verbal and written communication skills with a high attention to detail