Product Security Specialist

Role overview This role sits within a product security function at a company that builds connected-transportation and IoT telematics technology processing billions of data points daily. The specialist partners closely with development teams, security operations, and global stakeholders to embed secure practices across the product lifecycle, working on codebases spanning firmware, mobile, and web.

Responsibilities - Perform security evaluations on existing, new, and proposed products using source code, dynamic, and dependency scanners, plus manual code and architecture reviews. - Manually validate scanner findings by tracing source across C#, .NET, Java, JS/TS/HTML, Swift, Kotlin, Python, C, and firmware as applicable, and provide developer-level remediation guidance. - Write and maintain scripts (Bash and Python) to package scan inputs, automate scanner execution, and integrate scanning with CI pipelines and cloud storage and reporting. - Conduct threat modelling, penetration testing, and vulnerability assessments, and recommend improvements to product security posture. - Explain risk assessments at both technical and management levels, and author assessment reports and vulnerability descriptions for product owners and developers. - Contribute to secure coding standards and develop training material for current and future developers.

Requirements - Hands-on experience performing product or application security reviews across diverse codebases and languages. - Proficiency in Bash and Python scripting for security automation and CI integration. - Strong written and verbal communication skills, with the ability to translate technical risk for varied audiences. - Meticulous, highly organised approach with the ability to thrive under fast-changing priorities.

Nice to have - Experience supporting secure architectural design and industry-standard compliance controls. - Background in developing secure-coding training or internal security tooling.