Product Security Specialist
Geotab · Atlanta, Georgia - USA ·
- Work mode
- Hybrid
- Employment
- Full time
- Experience
- 5+ years
Geotab · Atlanta, Georgia - USA ·
Internship List · Oakville, Canada
GitLab · Remote, United States
commercetools · München, Bayern, Germany (Hybrid)
The Product Security Specialist conducts security evaluations, code reviews, and vulnerability assessments across multiple languages, writes Bash and Python scripts to automate scanning, integrates security into CI pipelines, and collaborates with development teams to embed security-by-design in Geotab's connected transportation products.
We are always looking for amazing talent who can contribute to our growth and deliver results! Geotab is seeking a Product Security Specialist who will perform security reviews ranging from individual static and dynamic scanner vulnerabilities to complex product architectural reviews on both internal and external products. If you love technology, and are keen to join an industry leader — we would love to hear from you!
As a Product Security Specialist your key area of responsibility will be performing security evaluations, tracing source code for vulnerabilities, writing scripts to increase scanning automation, and simulating cyber attacks to identify product security risks. You will need to work closely with development teams, security operations, and global stakeholders to integrate robust security practices throughout the product lifecycle. To be successful in this role you will be a meticulous, highly organized team player with excellent verbal and written communication skills who thrives under fast-changing priorities. In addition, the successful candidate will have strong analytical problem-solving skills, deep technical proficiency across multiple programming languages, and the ability to explain risk assessments to both technical and non-technical audiences.
Review existing/new/proposed products with a variety of source code, dynamic and dependency scanners, manual code reviews and security-based architecture reviews as required.
Manually validate scanner findings by tracing source code for a variety of code bases (C#, .net, Java, js/ts/html, swift, kotlin, python, C, firmware as applicable) and provide developer level suggestions for code remediation.
Explain risk assessments at both the developer (technical) and management (non technical) levels.
Write and maintain scripts/code (bash and python) to generate scan input packages, automate security scanner execution and integrate scanners with CI pipelines and Google Cloud storage and reporting mechanisms.
Manage and update scanning scripts quickly, and refactor as needed.
Contribute to secure coding standards (involves developing secure coding training for current and future developers).
Perform technical writing of assessment reports and vulnerability descriptions for product owners and developers.
Support with the design and implementation of secure architectures for products, ensuring robust security controls and compliance with industry standards.
Conduct security testing, including vulnerability assessments, penetration testing and code reviews. Provide recommendations for improving product security.
Perform threat modeling to identify potential security risks and vulnerabilities in products.
Contribute to and sometimes lead initiatives to improve the overall security posture of our products.
Assess and question whether the coverage is sufficient, and if not make recommendations to address coverage gaps.
Ensure thorough follow-up to prevent oversights, prioritize tasks that contribute to team objectives, and escalate issues promptly when necessary.
Monitor and respond to emerging security threats and vulnerabilities relevant to our products.
Develop and maintain security automation scripts and tools to streamline security processes.
Collaborate closely with development teams to integrate robust security practices throughout the product lifecycle, ensuring security-by-design principles are adhered to.
Utilize technical proficiency alongside strong communication skills to efficiently handle time-sensitive and confidential product vulnerability reports.
Support Geotab global strategic initiatives.
5 - 8 years of required previous experience in security evaluation/analysis, security code reviews, or relevant development experience.
Bachelor’s degree in Computer Science, Information Management, Engineering, or a related field (or equivalent combination of education and work experience).
Experience using source code, dynamic, and dependency scanners (e.g., Veracode, Fortify, Sentinel, OWASP dependency, NetSparker, Qualys).
Knowledge of programming languages (C, C#, .NET, Python, JavaScript/TypeScript), web service technologies (XML, JSON, SOAP, REST), and dependency package managers (npm, nuget).
Competency with Linux, Windows, GCE, Bash, and Python, along with proficiency in rapidly acquiring new programming languages.
Exceptional communication skills, high accuracy, meticulous attention to detail, and the ability to manage multiple tasks and projects simultaneously.
Security certifications and experience working within a technical or engineering high-technology industry are considered an asset.
Flex working arrangements
Home office reimbursement program
Baby bonus & parental leave top up program
Online learning and networking opportunities
Electric vehicle purchase incentive program
Competitive medical and dental benefits
Retirement savings program
*The above are offered to full-time permanent employees only
Geotab will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. Additionally, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, or (c) consistent with the Company's legal duty to furnish information.
We are committed to accommodating people with disabilities during the recruitment and assessment processes and when people are hired. We will ensure the accessibility needs of employees with disabilities are taken into account as part of performance management, career development, training and redeployment processes. If you require accommodation at any stage of the application process or want more information about our diversity and inclusion as well as accommodation policies and practices, please contact us at [email protected]. Geotab provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, sex, national origin, age, disability or genetics. In addition to federal law requirements, Geotab complies with applicable state and local laws governing nondiscrimination in employment in every location in which the company has facilities. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training. Geotab expressly prohibits any form of workplace harassment or discrimination based on race, color, religion, gender, sexual orientation, gender identity or expression, national origin, age, genetic information, disability, or veteran status. Improper interference with the ability of Geotab's employees to perform their job duties may result in discipline up to and including discharge. If you would like more information about our EEO program or wish to file a complaint, please contact our EEO officer, Klaus Boeckers at [email protected]. For more details, view a copy of the EEOC's Know Your Rights poster. By submitting a job application to Geotab Inc. or its affiliates and subsidiaries (collectively, “Geotab”), you acknowledge Geotab’s collection, use and disclosure of your personal data in accordance with our Privacy Policy. Click here to read our Privacy Notice.nearmap · Carlsbad, CA, us
paybyphone · Vancouver, British Columbia, Canada