Product Security Leader (Remote)

Product Security Strategy & Governance

Develop and lead the business unit’s product cybersecurity strategy aligned with business objectives and customer requirements.

Establish cybersecurity policies, standards, and secure design principles for hardware, firmware, and embedded software.

Define security architecture requirements for high-speed connectivity products (e.g., cables, connectors, active interconnects, modules).

Ensure alignment with industry standards (e.g., secure development lifecycle, zero trust principles).

Secure Product Development Lifecycle (SPDLC)

Integrate cybersecurity into all phases of New Product Introduction (NPI).

Define and enforce secure coding standards, threat modeling, and design reviews.

Ensure cybersecurity requirements are embedded in system and component specifications.

Partner with engineering teams to implement security-by-design practices.

Threat Modeling & Risk Assessment

Identify and evaluate potential attack vectors across:

Embedded firmware

ASIC/FPGA interfaces

High-speed data paths

External interfaces (I/O, management interfaces, etc.)

Conduct product-level threat modeling and risk assessments.

Define mitigation strategies and validate their effectiveness.

Vulnerability Management & Testing

Establish processes for:

Static and dynamic code analysis

Penetration testing (internal and third-party)

Firmware and hardware security validation

Lead root cause analysis and remediation of identified vulnerabilities.

Maintain vulnerability disclosure and response processes.

Supply Chain & Component Security

Define cybersecurity requirements for suppliers of ICs, firmware, and software components.

Assess third-party components for security risks (including open-source software).

Implement secure provisioning, authentication, and anti-tampering mechanisms.

Product Architecture & System Security

Collaborate with system architects to:

Design secure communication protocols

Implement encryption, authentication, and key management

Ensure secure boot, firmware integrity, and update mechanisms

Address risks associated with data center deployment environments (e.g., lateral movement, hardware-based attacks).

Incident Response & Monitoring

Develop and maintain product cybersecurity incident response plans.

Support investigation of field incidents and potential breaches involving company products.

Coordinate with customers and internal teams during security events.

Compliance & Certification

Ensure products meet relevant cybersecurity regulations and standards (customer-driven and regulatory).

Support audits, certifications, and customer security assessments.

Maintain documentation for compliance and traceability.

Training & Culture

Drive cybersecurity awareness across engineering and product teams.

Train engineers on secure design practices and emerging threats.

Act as a subject matter expert and advisor to leadership.

Bachelor’s or Master’s degree in Computer Engineering, Electrical Engineering, Cybersecurity, or related field

10+ years in cybersecurity, with strong emphasis on embedded systems and/or hardware-integrated products.

Experience in high-speed electronics, data center infrastructure, or networking products strongly preferred.

Proven experience implementing secure development lifecycle practices.

Technical Expertise

Embedded systems security (firmware, RTOS, low-level software)

Hardware security (ASICs, FPGAs, side-channel risks, secure elements)

Cryptography, secure boot, authentication protocols

Network and data path security in high-speed systems

Vulnerability assessment tools and penetration testing methods

Secure firmware update and key management systems

Frameworks Knowledge

Secure development lifecycle frameworks

Product security standards relevant to data center and networking environments

Zero Trust Architecture concepts

Standards Knowledge

ISO/IEC 27001:2022: The premier international standard, providing a framework for setting up an Information Security Management System (ISMS) to identify and mitigate risks.

ISO/IEC 27017/27018: Guidelines specifically for cloud security controls and the protection of personal data in the cloud.

NIST Cybersecurity Framework (CSF) 2.0: A voluntary, flexible framework focused on protecting critical infrastructure using five core functions: Identify, Protect, Detect, Respond, and Recover.

NIST SP 800-53: Prescribes security and privacy controls for information systems, often mandatory for U.S. federal data centers.

SOC 2 Type II: Attestation reports that evaluate internal controls regarding security, availability, and confidentiality.

ANSI/TIA-942: Establishes standards for data center design, construction, and operation, including physical security requirements for Tiers 1-4.

Leadership & Soft Skills

Strong cross-functional leadership (engineering, quality, product management)

Ability to influence design decisions without direct authority

Excellent communication skills for both technical and executive audiences

Analytical mindset with strong problem-solving capability

Ability to prioritize responsibilities in a fast-paced dynamic work environment.

Willingness to travel as required, ~30%

WE VALUE

Knowledge in data center architecture, connectors, wire harnesses, busbars, high speed connectivity products, high voltage, electronics, measurement & signal processing.

Experience in product development for data center applications

#TANAUV #LI-REMOTE #datacenters

ABOUT TE CONNECTIVITY

TE Connectivity plc (NYSE: TEL) is a global industrial technology leader creating a safer, sustainable, productive, and connected future. As a trusted innovation partner, our broad range of connectivity and sensor solutions enable the distribution of power, signal and data to advance next-generation transportation, energy networks, automated factories, data centers enabling artificial intelligence, and more.

Our more than 90,000 employees, including 10,000 engineers, work alongside customers in approximately 130 countries. In a world that is racing ahead, TE ensures that EVERY CONNECTION COUNTS. Learn more at www.te.com and on LinkedIn, Facebook, WeChat, Instagram and X (formerly Twitter).

COMPENSATION • Competitive base salary commensurate with experience: $175,000 – $260,000 (subject to change dependent on physical location) • Posted salary ranges are made in good faith. TE Connectivity reserves the right to adjust ranges depending on the experience/qualification of the selected candidate as well as internal and external equity. • Total Compensation = Base Salary + Incentive(s) + Benefits

BENEFITS • A comprehensive benefits package including health insurance, 401(k), disability, life insurance, employee stock purchase plan, paid time off and voluntary benefits.

EOE, Including Disability/Vets

IMPORTANT NOTICE REGARDING RECRUITMENT FRAUD TE Connectivity has become aware of fraudulent recruitment activities being conducted by individuals or organizations falsely claiming to represent TE Connectivity. Please be advised that TE Connectivity never requests payment or fees from job applicants at any stage of the recruitment process. All legitimate job openings are posted exclusively on our official careers website at te.com/careers, and all email communications from our recruitment team will come only from actual email addresses ending in @te.com. If you receive any suspicious communications, we strongly advise you not to engage or provide any personal information, and to report the incident to your local authorities.