Senior Product Security Engineer
hace 4 días
**About** the **Role**
As a Senior Product Security Engineer, you will:
- Promote Secure design, architecture, and implementation covering all steps of our Secure Software Development Life Cycle (SDLC).
- Support our Software Supply Chain initiative to define, implement and scale our software supply chain practices.
- Participate in Threat modeling sessions to guide secure design discussions and participate in risk assessments.
- Drive security projects (including security reviews, tool development, and creation of new security practices).
- Create security guidance and documentation, including compliance as code.
- Set a high standard for engineering quality and execution that leads to high quality product security artifacts to secure our products’ SDLCs.
**About You**
You’re a fit for the role of Senior Product Security Engineer if you have:
- Engineer Empathy: You have a strong understanding of how developers work and are able to present security initiatives to developers in a way that leverages that understanding.
- Drive to continually improve: You are able to analyze current processes and procedures and determine ways to improve and increase efficiency.
Technical Skills:
- Experience with software supply chain security at both the SCM, Build and Deployment level
- Strong understanding of cryptographic primitives supporting authenticity and integrity checks
- Deep technical understanding and experience assessing common security vulnerabilities and risks, as well as advising on countermeasures and compensating controls.
- Proficiency in writing Python to implement services and tooling as well as reading other programming languages in the context of secure code review
- Experience collaborating with product development teams directly to instill security.
- You have experience with SAST, DAST and SCA scans and the analysis of the identified security findings/results.
- Experience with DevSecOps in a cloud native context and in integrating security in CI/CD pipelines (GitHub Actions preferred but experience with other Cis is good eg. Gitlab CI, ).
- Experience with automation in general consuming APIs, with plus when the automation is related to security tooling
- Knowledge of one or more security frameworks OWASP’s ASVS, CIS Benchmarks, NIST CSF,
- Ability to manage and prioritize between multiple tasks and projects.
- Strong Communication Skills (verbal, written, ability to influence others)
- Learning Mindset (emerging technical trends, always learning)
- Familiarity with SLSA, in-toto and OpenSSF security scorecard
- Agile Methodology experience
- Experience with Linux systems and containers
- Experience with AWS or Azure
- Infrastructure as code with Terraform
- Experience with Security tools (Web attack proxies, SAST, DAST, SCA)
LI-FP2
**What's in it For You?**
You will join our inclusive culture of world-class talent, where we are committed to your personal and professional growth through:
- ** Hybrid Work Model**: We’ve adopted a flexible hybrid working environment (2-3 days a week in the office depending on the role) for our office-based roles while delivering a seamless experience that is digitally and physically connected
- ** Wellbeing**:Comprehensive benefit plans; flexible and supportive benefits for work-life balance: flexible vacation, two company-wide Mental Health Days Off; work from another location for up to a total of 8 weeks in a year, 4 of those weeks can be out of the country and the remaining in the country, Headspace app subscription; retirement, and employee incentive programs; resources for mental, physical, and financial wellbeing.
- ** Culture**: Globally recognized and award-winning reputation for equality, diversity and inclusion, flexibility, work-life balance, and more.
- ** Learning & Development**: LinkedIn Learning access; internal Talent Marketplace with opportunities to work on projects cross-company; Ten Thousand Coffees Thomson Reuters café networking.
- ** Social Impact**: Ten employee-driven Business Resource Groups; two paid volunteer days annually; Environmental, Social, and Governance (ESG) initiatives for local and global impact.
- ** Purpose-Driven Work**: We have a superpower that we’ve never talked about with as much pride as we should - we are one of the only companies on the planet that helps its customers pursue justice, truth, and transparency. Together, with the professionals and institutions we serve, we help uphold the rule of law, turn the wheels of commerce, catch bad actors, report the facts, and provide trusted, unbiased information to people all over the world.
Do you want to be part of a team helping re-invent the way knowledge professionals work? How about a team that works every day to create a more transparent, just and inclusive future? At Thomson Reuters, we’ve been doing just that for almost 160 years. Our industry-leading products and services include highly specialized information-enabled software and tools for
-
Senior Site Reliability Engineer
hace 2 semanas
06600, Juárez, CDMX, México Thomson Reuters A tiempo completo**Senior Site Reliability Engineer** Are you passionate about the chance to bring your experience to a world-class company that is market-leading for both content and technology? If yes, we are looking for you! We are looking for a Senior Site Reliability Engineer, to join our Shared Capabilities, Service Reliability and Operations group. We provide...
-
Senior DevOps Engineer
hace 2 meses
06600, Juárez, CDMX, México Thomson Reuters A tiempo completo**Senior DevOps Engineer** Are you passionate about the chance to bring your extensive technical expertise to be part of a DevOps Team using industry best practices in a world-class company? **Thomson Reuters **is looking for a **Senior DevOps Engineer who is **responsible for building and supporting ONESOURCE Global Trade Management. This engineer...
-
Senior Site Reliability Engineer
hace 3 semanas
06600, Juárez, CDMX, México Thomson Reuters A tiempo completo**Sr. Site Reliability Engineer** Thomson Reuters is the Answer Company. We provide authoritative content, advanced technologies, and human expertise to help our customers find trusted answers. We enable professionals in the legal, tax and accounting, and media markets to make the decisions that matter most, all powered by the world's most trusted news...
-
Senior Product Development Engineer
hace 4 días
Juárez, Chihuahua, México Buscojobs México A tiempo completoJob OverviewWe are seeking a highly skilled Senior Product Development Engineer to join our team at Buscojobs México.
-
Senior .NET Software Engineer
hace 2 meses
06600, Juárez, CDMX, México Thomson Reuters A tiempo completo**Senior Software Engineer** **About the Role** In this opportunity as a **Senior Software Engineer**, you will be responsible to: - ** Primary skills:.NET, Angular, API development and SQL Server**: - Develop and maintain RESTful APIs and ensure seamless integration with front-end components. - Understand and be able to explain practices (such as...
-
Senior Software Engineer
hace 4 semanas
06600, Juárez, CDMX, México Thomson Reuters A tiempo completo**Senior Software Engineer** As an employee at Thomson Reuters, you will play a role in shaping and leading the global knowledge economy. Our technology drives global markets and helps professionals around the world make decisions that matter. Whether solving for today’s challenges or tomorrow’s aspirations, you will work with the industry’s brightest...
-
Senior Cyber Security Network Engineer
hace 3 meses
Ciudad de México, CDMX NielsenIQ A tiempo completo**Company Description** NielsenIQ is working toward a position of greater maturity within the Network Security technology domain. This position will be responsible for maintaining current technologies while working toward implementing more sophisticated means of visibility and control of network traffic. You will be supporting programs across all geographies...
-
Senior DevOps Engineer
hace 2 meses
06600, Juárez, CDMX, México Thomson Reuters A tiempo completo**Sr. DevOps Engineer** **About the role**: - Implement the full stack software development lifecycle by utilizing Continuous Integration / Deployment methodologies for code delivered by development teams. - Monitoring services for availability and performance. - Perform system reliability engineering activities such as trend analysis and root cause...
-
Enterprise Security Engineer
hace 21 horas
Ciudad de México, CDMX Encora A tiempo completo**Important Information** Experience: +5 years Job Mode: Full-time Work Mode: Work from home **Job Summary** We are looking for an Enterprise Security Engineer to join our Security team to help us deliver on several key initiatives for the company in the software and security engineering spaces. Through your work, you will dramatically improve our...
-
Global Security Network Engineer
hace 3 meses
Ciudad de México, CDMX Johnson Controls International A tiempo completo**What you will do**: Hosted in Mexico, the Global Cyber Security Network Engineer is a position, part of a global team, reporting into the Global Cyber Security Engineering Manager with responsibility of assisting in development of network cyber security standards and governance of network implementations by JCI’s Network team **How you will do it**: The...
-
Cloud Security Engineer
hace 3 meses
Ciudad de México, CDMX Vinneren Consulting Sa de CV A tiempo completo**Cloud Security Engineer** Buscamos integrarte a un equipo multidisciplinario y retador de diseño y desarrollo cloud para plataformas de e-commerce, tu principal objetivo será gestionar la seguridad de los servicios informáticos de las aplicaciones en la nube junto con su arquitectura, los servicios de interfase con terceros y las telecomunicaciones,...
-
Product Designer Senior
hace 6 días
06600, Juárez, CDMX, México Sit Digital México A tiempo completoSomos **Sit Digital México**, una compañía especializada en transformación digital e innovación. Buscamos a un **Product Designer Senior** especialista en el diseño de productos, principalmente digitales, desde su concepción hasta su lanzamiento al mercado. Ingresaras como consultor externo en **BBVA México.** **Modalidad de trabajo Híbrida**...
-
Senior Software Engineer Java
hace 2 meses
06600, Juárez, CDMX, México Thomson Reuters A tiempo completo**Sr. Software Engineer - Product Engineering** Are you passionate about the chance to bring your technical experience to drive our Engineering team using industry best practices in a world-class company? You will be responsible for continually looking to optimize systems and services for security, automation, performance and availability, while ensuring...
-
Information Security Engineer
hace 3 meses
Ciudad de México, CDMX Bishop Fox A tiempo completoGiven our exceptional growth, we are expanding and hiring an Information Security Engineer to join us on this exciting journey. This position will be responsible for helping to control information security risks by managing threat/vulnerability management systems and other security technologies to mitigate risks. **Responsibilities**: - Monitor systems for...
-
Product Engineer
hace 4 semanas
Juárez, Chihuahua, México Flex LTD A tiempo completoAt Flex LTD, we're looking for a skilled Product Engineer to join our team in Guadalajara, Juarez south Campus. As a Product Engineer, you will be responsible for receiving, evaluating, cleaning, and customizing all technical information/documentation from the customer related to their product, derived from a New Product Introduction (NPI) or a design change...
-
Senior Service Reliability Engineer
hace 3 meses
06600, Juárez, CDMX, México Thomson Reuters A tiempo completo**Senior Service Reliability Engineer** Are you passionate about the chance to bring your skills to a world-class content-driven technology organization? If yes, come join our team and develop your career with our growing global center group. **About the role**: In this opportunity as a **Senior Service Reliability Engineer - Global Command Center,** you...
-
Senior Software Engineer
hace 3 semanas
Ciudad Benito Juárez, Nuevo León, México Cronoshare A tiempo completoJob Title: Senior Software EngineerAs a Senior Software Engineer, you will work on designing and developing scalable cloud-based systems. Your primary focus will be on ensuring the reliability, security, and performance of our cloud infrastructure. If you have a passion for cloud architecture and are looking for a challenging role, this might be the perfect...
-
Senior Platform Engineer
hace 21 horas
Ciudad de México, CDMX NTT DATA A tiempo completo**SENIOR PLATFORM ENGINEER** **Who We Are**: At**NTT DATA**, we are committed to hiring innovative and passionate individuals eagerto contribute and grow with us.**Launch by NTT DATA**represents our strategic initiative to integratethe expertise and technology of leading digital firms, leveraging NTT DATA's global reach and corestrengths. We are seeking a...
-
Senior Process Engineer
hace 4 semanas
Juárez, Chihuahua, México Johnson & Johnson A tiempo completoJob SummaryWe are seeking a highly skilled Senior Process Engineer to join our team at Johnson & Johnson. As a key member of our manufacturing team, you will be responsible for identifying and developing internal areas of opportunities through the DMAIIC methodology and tools of Excellency in processes.Key ResponsibilitiesIdentify and develop internal areas...
-
Senior Software Engineer
hace 3 semanas
Juárez, Chihuahua, México Bosch Group A tiempo completoJob Description:Our company is seeking a Senior Software Engineer - Cloud Services to join our team. In this role, you will be responsible for designing, developing, and deploying cloud-based software solutions. Your primary focus will be on ensuring the security, scalability, and reliability of our cloud infrastructure.Key Responsibilities:1. Design and...