Software Product Security Engineer (Monterrey)

Software Product Security Engineer (Monterrey)

13 ago
|
Celestica
|
Monterrey

13 ago

Celestica

Monterrey

Req ID: 133574

Remote Position: No

Region: Americas

Country: Mexico

State/Province: Actual Leon

City: Monterrey

General Overview

Functional Area:
Information Technology (ITM)

Career Stream:
IT Solutions (SOLN)

Role:
Specialist (SPE)

Job Title:
Specialist, IT Solutions

Job Code:
SPE-ITM-SOLN

Job Level:
Band 8

Direct/Indirect Indicator:
Indirect

Summary
A Software Product Security role (often called
Product Security Engineer
or
ProdSec
) is the bridge between traditional cybersecurity and software engineering. Unlike IT security, which focuses on protecting the company's internal network, Product Security focuses on ensuring the software the company
*sells or provides*
is resilient against attacks.

Detailed Description

The Product Security Engineer works directly with DevOps and Engineering teams to bake security into the
Software Development Life Cycle (SDLC)
. The goal is to move security "left"—finding and fixing vulnerabilities during the design and coding phases rather than after the product has launched.

Knowledge/Skills/Competencies




Developer Training:
Creating "Security Champions" programs to teach engineers how to write defensive code.
- Secure Design & Threat Modeling: Reviewing new features before a single line of code is written. You’ll identify potential attack vectors and suggest mitigations.
- Vulnerability Management: Triaging bugs found via automated scanners, internal audits, or Bug Bounty programs.
- Security Tooling: Implementing and managing tools like SAST (Static Analysis), DAST (Dynamic Analysis), and SCA (Software Composition Analysis) to catch insecure dependencies.
- Code Reviews: Performing manual "deep dives" into critical codebases to spot logic flaws that automated tools might miss.
- Incident Response: Acting as a subject matter expert when a security flaw is exploited in production.
- Internal Red Teaming: Lead activities to find ways to bypass the logic to alter "Recipe" files or production data.

Physical Demands
- La

📌 Software Product Security Engineer (Monterrey)
🏢 Celestica
📍 Monterrey

Postulate a este anuncio

Muestra tus habilidades a la empresa, rellenar el formulario y deja un toque personal en la carta, ayudará el reclutador en la elección del candidato.

Suscribete a esta alerta:

Recibe por email las nuevas ofertas de trabajo para: software product security engineer (monterrey) / monterrey

Suscribete a esta alerta:

Recibe por email las nuevas ofertas de trabajo para: software product security engineer (monterrey) / monterrey