Senior Manager - Application & Product Security
Core
Lead secure development lifecycle (SDL) and act as technical authority for product, application, and cloud security for customer-facing apps, digital platforms, IoT, and production equipment.
Role type
Senior Manager, Application & Product Security Engineering Lead
Builds
Secure development processes, security policies, and tooling for ZEISS Consumer Markets applications and IoT products
Domain
Industrial IoT, Consumer Electronics, Application Security
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
secure development lifecycle (SDL) implementation, threat modelling, architecture security review, security testing (SAST/DAST/SCA), penetration testing, vulnerability management, FOSS compliance, security policy definition, technical leadership, security tool selection
Preferred skills
none stated
Technologies
static application security testing, dynamic application security testing, software composition analysis, security monitoring tools
Responsibilities
Develop and enforce security policies and standards; Provide leadership and guidance to Security Engineers on learning paths and development; Advise teams on secure design and review architecture proposals; Guide identification of security requirements; Support threat modelling and selection of security controls; Oversee creation of security documentation; Ensure implementation of SDL including maintenance of security tools; Plan and execute security testing activities; Review findings and define countermeasures; Ensure findings are remediated before production; Coordinate FOSS-related activities; Monitor and review SDL effectiveness
Seniority
Senior, hands-on IC with lateral leadership
