Senior Software Security Engineer

**Motorola Solutions values your privacy** .* Perform threat modeling, risk assessments, and architecture reviews to identify and mitigate risk.* Support the engineering teams on definition on detailed security requirements to meet compliance requirements and industry best practices.* Perform security code reviews looking for potential security vulnerabilities.* Act as a subject matter expert to advise and answer questions from engineering and compliance teams on technical product security matters.* Define and oversee the deployment of Software Composition Analysis (SCA) tools to compile SBOMs of software components, helping to identify known vulnerabilities and license compliance violations.* Define and oversee the deployment of automated security testing tools into CI pipelines, including Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), and Secret Detection scanning tools.* Manual penetration testing of web applications (backend and frontend).Manual penetration testing skills in the domains of cloud infrastructure, embedded/OS or mobile are desirable.* Write custom scripts or unit test cases to check for vulnerabilities or broken/missing security controls.* Recommend improvements to existing security scanning tools and processes, and propose new ones.* Establish and maintain secure coding standards, baseline product security requirements and more general best practices to provide guidance to development teams.* Assist the program area with implementing a secure Continuous Integration/Continuous Delivery (CI/CD) pipeline utilizing DevSecOps principles and practices to increase automation.* Implement automated security controls as part of CI/CD pipelines.* Bachelor’s degree in Computer Science, Information Security, or related field; Master’s degree preferred.* 5+ years of experience in Security Engineering, with expertise in product and application security.* In-depth knowledge of Linux, Docker, Kubernetes, and cloud platforms (AWS, Azure, GCP).* Familiarity with authentication technologies, cryptography, and security protocols (e.g., TLS).* Strong software development skills, with experience in Go, Python, JavaScript, C/C++, and Bash.* Understanding of web-related protocols (HTTP, REST APIs), networking protocols (TCP/IP), and security frameworks (OWASP, NIST).* Experience with security tools like SAST, DAST, IAST, and SCA, and secure CI/CD pipeline implementation.* Knowledge of threat modeling, vulnerability remediation, and emerging threats.* Desirable qualifications include exploit development, familiarity with AI/ML security considerations, and certifications like OSCP, CISSP, or CCSP.* Exceptional analytical, investigative, and communication skills, with ability to advise technical and non-technical stakeholders.* Familiarity with security considerations for AI/ML systems is desirable.* Understanding of distributed systems design, implementation and operation.* Understanding of privacy threats and controls, including on how to adapt generic best practices to specific scenarios in the product by providing detailed specifications to stakeholders.* Exploit development experience, and good understanding of the necessary conditions to trigger different vulnerability types, and the maximum impact achievable.* Experience with enterprise log collection and analysis platforms (e.g., Splunk, OSQuery).* Master's degree or equivalent experience preferred.* Security certifications are a plus, including OSCP, OSEE, SANS/GIAC, CCSP, and CISSP.* Excellent verbal and written communication, with the ability to translate complex security concepts to technical and non-technical stakeholders.* Demonstrated ability to design, document, and implement new security processes.* Experience in a high-growth technology environment or SaaS business.* Ability to remain calm under pressure, especially during incidents or audits.* Bachelors Degree with 4+ years of experience in Security Engineering with a focus on product security and/or application security.* 2+ years of experience in performing threat modeling* 2+ years of experience with security tools such as SAST, DAST, IAST, and/or SCA.#J-18808-Ljbffr