The Nemetschek Group is a pioneer in the digital transformation of the AEC/O industry, with a strong focus on open standards such as OPEN BIM. As one of the world’s leading groups in this industry, Nemetschek improves the construction process through intelligent software solutions that help customers plan, build, and operate buildings more efficiently, sustainably, and with fewer demands on resources.
HCSS, part of the Nemetschek Group, provides innovative software solutions that help heavy civil construction companies streamline their operations and improve productivity. While this position sits within Nemetschek, the R&D Security Manager will provide dedicated security support to HCSS and collaborate closely with its product development and engineering teams.
The R&D Security Manager will integrate security seamlessly into HCSS’s product development lifecycle, partnering with Agile teams to embed security into sprint planning and prioritize relevant risks. This person will establish initiatives such as a security champions program and “train-the-trainer” efforts to strengthen security awareness across R&D. The role will also support secure source code management, regulatory compliance, and the development of security documentation frameworks. By monitoring emerging threats and managing vulnerabilities, the R&D Security Manager will help protect intellectual property and sensitive data while serving as a key liaison among HCSS R&D, Nemetschek Shared Services, and the appropriate security leadership teams.
About the Role:
- Implement comprehensive security strategies for the R&D department as part of the product development process (Agile Sprint Planning) and Reporting to Brand CISOs
- Establish a train the trainer initiative for awareness and knowledge exchange throughout the R&D personnel
- Review and Implement source code repository hardening and change management according to guideline
- Prioritize security issues in Sprint backlog
- Act as interface to Shared Services
- Establish Security Documentation (Setup and Maintenance of the Framework)
- Identify and document vulnerability remediation information (based on CVSS 4) to R&D engineers
- Identify and assess security risks related to R&D activities, including intellectual property, confidential data, and emerging technologies
- Ensure compliance with relevant security regulations like GDPR, industry standards, and company policies in software development through workshops
About You:
- Education & Experience:
- Bachelor’s or Master’s degree in Information Security, Computer Science, Engineering, or related field.
- Multiple years of experience in a security role, preferably within R&D or high-tech environments.
- Technical Skills:
- Excellent Deep knowledge of cybersecurity technologies, such as web application firewalls, DAST, API security, Cloud and App Monitoring, XDR
- Familiarity with security challenges in R&D, such as secure coding, technology transfer, and emerging technologies.
- Technical Writing: Strong abilities for creating clear and comprehensive security documentation.
- OWASP Top Ten: In-depth knowledge of the security risks and practical experience in mitigating these vulnerabilities.
- Understanding of product development lifecycles and integrating security into R&D processes.
- Proficiency in security-related software like Snyk and Jira.
- Pentesting
- Soft Skills:
- ”Speaking Developers Language”
- Strong problem-solving skills and the ability to manage complex projects.
- Excellent communication and collaboration skills to work with multidisciplinary teams.
- High ethical standards and attention to detail.
- Mentoring and knowledge transfer
- Certifications (preferred):
- Certified Information Systems Security Professional (CISSP)
- Certified Secure Software Lifecycle Professional (CSSLP) or similar
Why Nemetschek?
- Impact: We offer you a diverse position in a motivating work environment where you can realize your ideas.
- Sustainable Growth: In our sustainably growing and innovative company you have the chance to develop yourself further.
- Culture: With us you work in an international team with flat hierarchies and short decision-making processes, in which you can make a difference.
- Work-Life-Balance: We offer you various benefits in the areas of sports, nutrition, childcare and much more.
- Health: The health of all employees is important to us, which is why we offer you a wide range of health and preventive care services.
- Hybrid Way Forward: Through mobile working and variable working hours without core working hours, we enable you to be flexible, both professionally and privately.
We, the Nemetschek Group, are a global organization with employees from 60 nations. For us, diversity, equity, inclusion, and belonging are the keys to unleashing our full potential and driving true innovation. We can best support our customers in shaping the world through a diverse culture. We aim to treat EVERYONE with respect and appreciation, regardless of differences. Valuing diverse opinions and creating equal opportunities for all is of the utmost importance for us as an organization, and as individuals.
This role will report out of our Dallas or Sugarland office in a hybrid model.
Base Pay Range: $129,400 - $161,800 + Annual bonus
#Nemetschek #LI-FT1