Job Description
Job Description
• Partner with product teams to plan, execute, and maintain Product Security activities for new development, major releases, & sustaining changes in alignment with Product Security procedures.
• Develop & maintain Product Security Management Plans and Files, ensuring cybersecurity activities are planned, traceable, and audit‑ready.
• Integrate Product Security into design controls, risk management, and release readiness processes.
• Create & maintain product threat models, including asset identification, data flows, trust boundaries, threats, and mitigations.
• Conduct cybersecurity risk assessments: requirements gap analysis, CVSS-based vulnerability scoring, residual risk evaluation, and risk acceptance documentation.
• Coordinate and support security testing efforts (static code analysis, open-source and third‑party dependency analysis, vulnerability scanning, and security assessments), and drive remediation with engine...
• Partner with product teams to plan, execute, and maintain Product Security activities for new development, major releases, & sustaining changes in alignment with Product Security procedures.
• Develop & maintain Product Security Management Plans and Files, ensuring cybersecurity activities are planned, traceable, and audit‑ready.
• Integrate Product Security into design controls, risk management, and release readiness processes.
• Create & maintain product threat models, including asset identification, data flows, trust boundaries, threats, and mitigations.
• Conduct cybersecurity risk assessments: requirements gap analysis, CVSS-based vulnerability scoring, residual risk evaluation, and risk acceptance documentation.
• Coordinate and support security testing efforts (static code analysis, open-source and third‑party dependency analysis, vulnerability scanning, and security assessments), and drive remediation with engine...