Company Overview:
ADT has been in the business of helping save lives since 1874. As the #1 smart home security provider in the U.S., we help protect and connect families, businesses and larger commercial customer every day. Our continuous innovation, advanced technology and strategic partnerships deliver products and services that help protect life and valuables, whether at home, your business or on the go. And as times change, so do we. Above all, our mission is clear: we help save lives for a living. Looking for a career where you can make a real impact? Join our team today and put purpose behind your paycheck. #WeAreADT
Check out more about life at ADT .
Summary:

Want to help make the world a safer place? Does the challenge of securing devices for the largest security and smart home company in the US excite you? We are seeking a highly skilled and experienced Director of Product Security to join our team. In this role, you will be responsible for overseeing the cybersecurity governance and assurance of our products, as well as risk management related to ongoing development practices and infrastructure. You will also be responsible for advising and educating product development teams on security and privacy best practices in on-premises and Cloud environments, as well as for IoT and artificial intelligence (AI) technologies.

Responsibilities:

• Manage a team of product security specialists.
• Research, design, and develop hardware security architecture requirements.
• Develop and implement cybersecurity governance and assurance strategies for our products.
• Conduct security architecture reviews of product hardware and software.
• Track, manage, and mitigate risks related to ongoing development practices and associated infrastructure.
• Partner closely with product engineering teams to remediate vulnerabilities and provide a roadmap for security improvements.
• Work with vendors, partners, and service providers to manage supply chain risks.
• Interface and maintain relationships with penetration testing teams.
• Provide security guidance and oversight for processes and technology in the areas of sensitive data protection, security vulnerability management, and attack surface reduction/prevention.
• Develop action plans, timelines, and reports to address and improve the security posture of consumer products.
• Stay apprised of the latest hardware and software threat intelligence and use your understanding of attacker techniques, tools, and tactics to provide preventive measures based on risk tolerance.
• Help our product teams comply with regulated and ordinance requirements such as UL.
• Advise and educate product development teams on security and privacy best practices, including IoT and AI technologies.
• Manage a bug bounty program.

Required Experience and Skills:

• Experience leading and managing cybersecurity teams.
• Demonstrated knowledge of the latest and emerging trends in the Information Security field.
• Security threat modeling and penetration testing.
• Extensive experience in cybersecurity governance and assurance.
• Strong knowledge of security and privacy best practices for developers and experience working as a developer or advising developers.
• Knowledge of application security tooling, such as Static application security testing (SAST), Dynamic Application Security Testing (DAST), Software Composition Analysis (SCA), CI/CD pipelines, etc.
• Experience securing Artificial Intelligence and Machine Learning systems is a bonus.
• Experience with bug bounty programs.
• Familiarity with security and privacy regulations and industry standards such as NIST 800-53 and the California Consumer Privacy Act of 2018 (CCPA).
• Ability to work collaboratively with cross-functional teams.
• Excellent written and verbal communication skills, including the ability to interact with team members at all levels within the company from the end user to executive leadership as well as vendors.
• Ability to use independent judgement to make sound, justifiable decisions that contribute to problem solving.

Desired Skills and Knowledge:

• Experience with hardware attack techniques and debugging tools.
• Familiarity with Linux systems, cloud infrastructure, and mobile ecosystems.
• Familiarity with networking protocols and networking security best practices.
• Experience with programming and implementing software in languages such as C, C , Java, and Python.

Education and Certifications:

• Bachelor's Degree in Computer Science, Engineering, or Information Security preferred, but equivalent work experience also acceptable.
• Security and technical certifications such as CISSP, OSCP, GPEN preferred.

ADT is an Equal Employment Opportunity (EEO) Employer. We celebrate diversity and are committed to building an inclusive team that represents a variety of backgrounds, perspectives, and skills. ADT strives to ensure every employee and applicant feels valued. Visit us at jobs.adt.com/diversity to learn more.