Product Security Engineer

As a product security engineer you will play a key role in the evaluation, support, management, and implementation of cybersecurity measures pertaining to HVAC control and communicating systems for Bosch Home Comfort North America. The selected individual will possess some experience in the design and validation of security services executing on different hardware platforms. He or she will assume the role of Security Manager for current and future projects, and be responsible for security feature implementation according to the product life cycle for various HVAC connected systems.Job ResponsibilitiesSecurity reviews for new features, products, technologies, and services.Secure design, architecture, implementation, and penetration testing of HVAC connectivity systems (i.e. IoT devices, AWS cloud, Mobile App).Secure development life-cycle (SDLC) practices including threat modeling and security testing.Influence decision-makers and stakeholders throughout the organization across project teams to achieve a consistently high security bar.Assist in security review engagements and lead remediation efforts.Create security guidance and documentation (e.g. Security Concept) for development.Develop and deliver security training and outreach to internal development teams.Develop and improve metrics that drive desired behavior and security outcomes.Identify pressing security problems that are amenable to automatic detection. Work to implement new detection techniques and tools.Ensure that detected security issues are treated with a level of urgency that reflects their true risk.Investigate security issues and identify opportunities for detecting or preventing similar issues with automation.Provide guidance to the Regional Business Unit Engineering and third-party development teams on secure coding and development practices.