Infosec Senior Expert - Application & Product Security Engineering
Core
Lead secure development lifecycle (SDL) and act as technical authority for product, application, and cloud security for customer-facing applications, digital platforms, IoT products, and production equipment.
Role type
Senior IC security engineering lead with lateral leadership
Builds
Secure software development processes, security controls, and architecture reviews for ZEISS Consumer Markets products
Domain
Medical technology, industrial quality solutions, vision care, and sports/cine optics
Deliverable
production ML models | product features | infrastructure
Required skills
Secure development lifecycle (SDL) implementation, threat modelling, security architecture review, security testing (SAST/DAST/SCA), penetration testing coordination, FOSS compliance management, cloud security (AWS/Microsoft), IoT/device software security, regulatory compliance (ISO 27k, IEC 62443, NIST, GDPR, HIPAA)
Preferred skills
Medical/finance/insurance industry experience, Microsoft and AWS cloud technologies, Linux and Open Source, development of IoT/device software
Technologies
AWS, Microsoft, Linux, Open Source, SAST, DAST, SCA
Responsibilities
Define and enforce security policies and standards, provide professional leadership and guidance to security engineers, advise teams on secure design and review architecture proposals, guide identification of security requirements and support threat modelling, ensure implementation of SDL including security tools usage, oversee planning and execution of security testing activities, coordinate FOSS-related activities, monitor and report on SDL effectiveness
Seniority
Senior, hands-on IC with lateral leadership
