Product Security Engineer

Threat Intelligence Analyst I - Cyber Security

Who we are:

Born digital, UST transforms lives through the power of technology. We walk alongside our clients and partners, embedding innovation and agility into everything they do. We help them create transformative experiences and human-centered solutions for a better world.

UST is a mission-driven group of over 39,000 practical problem solvers and creative thinkers in over 30 countries. Our entrepreneurial teams are empowered to innovate, act nimbly, and create a lasting and sustainable impact for our clients, their customers, and the communities in which we live.

With us, you'll create a boundless impact that transforms your career-and the lives of people across the world.

Visit us at .

You Are:

UST is looking for a Product Security Engineer for their client. Partner with various stakeholder groups, to promote and build a culture of security and ensure products are designed and built securely.

The Opportunity:

• Partner with Product Engineering, Legal, and Information Security teams to ensure security & compliance objectives are identified and achieved.
• Partner with product teams across Applied to implement/integrate secure SDLC concepts such as training, security requirements, threat modeling, code/design reviews, and security testing.
• Architect and implement new or updates to product security solutions.
• Provide technical advice to clients and teams on design, installation, and maintenance of product per security requirements.
• Work with Information Security and Information Technology teams to build & maintain controls to manage varied risks including application and cyber risks.
• Work across teams to develop and define project/program information security metrics & dashboards.
• Monitor events, collate and analyze data to assess the environment for product security risk, policy violations, & unusual activity and perform root cause analysis.
• Work with a global team to help implement and monitor security controls to proactively identify product security issues.

This position description identifies the responsibilities and tasks typically associated with the performance of the position. Other relevant essential functions may be required.

What you need:

• Bachelor's degree or equivalent experience in Security
• Minimum 6 to 8 years of experience in Application and/or product security
• Knowledge of regulatory guidelines and standards such as ISO27001, SEMI Standards, etc.
• A thorough understanding of common application security tools, code libraries and documentation.
• Understanding of threat modeling, security vulnerabilities, attacker exploit techniques, and methods for their remediation.
• Familiarity with the tools for various security activities: Static Code Analysis, DAST Penetration Testing, Intrusion Detection/Prevention, etc.
• Experience with web application penetration testing
• Experience in performing source code review.
• Working knowledge of one scripting language and or familiarity with at least one software programming language and a framework is a plus.
• Excellent written and verbal communication skills with the ability to adapt messaging to executive, technical, and non-technical audiences.
• Certification in any security area is a plus.
• Experience working with manufacturing equipment or industrial equipment is a plus.
• Experience working in semi-conductor industry is a plus.
• Ability to interpret security tools and penetration testing results to stakeholders and provide advice on vulnerability remediation and risk mitigation.
• Should have good understanding of DevSecOps concepts/principles and cloud native services, to enable secure development and deployment of applications in the Cloud.
• Have experience in performing application security/penetration testing using manual and automated tools.

Compensation can differ depending on factors including but not limited to the specific office location, role, skill set, education, and level of experience. As required by applicable law, UST provides a reasonable range of compensation for roles that may be hired in various U.S. markets as set forth below.

Role Location: California

Compensation Range: $60,000-$85,000

Our full-time, regular associates are eligible for 401K matching, and vacation accrual and are covered from day 1 for paid sick time, healthcare, dental, vision, life, and disability insurance benefits. Depending on the role, some associates may also be eligible for stock options.

What we believe:

We're proud to embrace the same values that have shaped UST since the beginning. Since day one, we've been building enduring relationships and a culture of integrity. And today, it's those same values that are inspiring us to encourage innovation from everyone, to champion diversity and inclusion, and to place people at the center of everything we do.

Humility:

We will listen, learn, be empathetic and help selflessly in our interactions with everyone.

Humanity:

Through business, we will better the lives of those less fortunate than ourselves.

Integrity:

We honor our commitments and act with responsibility in all our relationships.

Equal Employment Opportunity Statement

UST is an Equal Opportunity Employer.

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.

UST reserves the right to periodically redefine your roles and responsibilities based on the requirements of the organization and/or your performance.

#LI-SM3