Senior Software Security Engineer

Define and oversee the deployment of Software Composition Analysis (SCA) tools to compile SBOMs of software components, helping to identify known vulnerabilities and license compliance violations.

Define and oversee the deployment of automated security testing tools into CI pipelines, including Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), and Secret Detection scanning tools.

Manual penetration testing of web applications (backend and frontend).Manual penetration testing skills in the domains of cloud infrastructure, embedded/OS or mobile are desirable.

Write custom scripts or unit test cases to check for vulnerabilities or broken/missing security controls.

Recommend improvements to existing security scanning tools and processes, and propose new ones.

Triage the findings from the automated security scanning tools.

Validate potential security vulnerabilities to determine whether they are actual true positives, or false positives (i.e. non-applicable) in the product context. Write proof of concept exploits when necessary to achieve this.

Assess the risk of vulnerabilities and threats in order to help the business determine their remediation priority order.

Communicate the identified security issues to engineering and compliance stakeholders, and manage them throughout the SDLC process to ensure they are properly addressed.

Establish and maintain secure coding standards, baseline product security requirements and more general best practices to provide guidance to development teams.

Assist the program area with implementing a secure Continuous Integration/Continuous Delivery (CI/CD) pipeline utilizing DevSecOps principles and practices to increase automation.

Implement automated security controls as part of CI/CD pipelines.

Support product security incident response processes, including root cause analysis (identify the affected product components, data, and the overall impact level) and definition of mitigation strategies.

Define clear criteria and protocols for security incident response.

Conduct post-incident analysis to compile lists of lessons learned, and measures to prevent similar incidents from reoccurring , and refine response strategies.

Monitor emerging security threats, vulnerabilities, and trends to proactively investigate, remediate, and integrate new protections.

Ensure products comply with relevant security standards, certifications, and regulations (e.g., OWASP, NIST).

Qualifications:

7+ years of experience in Security Engineering with a focus on product security and/or application security.

Bachelor’s degree in Computer Science, Information Security, or a related technical field.

Familiarity with security considerations for AI/ML systems is desirable.

Understanding of distributed systems design, implementation and operation.

Understanding of privacy threats and controls, including on how to adapt generic best practices to specific scenarios in the product by providing detailed specifications to stakeholders.

Exploit development experience, and good understanding of the necessary conditions to trigger different vulnerability types, and the maximum impact achievable.

Experience with enterprise log collection and analysis platforms (e.g., Splunk, OSQuery ).

Master's degree or equivalent experience preferred.

Security certifications are a plus, including OSCP, OSEE, SANS/GIAC, CCSP, and CISSP.

EEO Statement

Motorola Solutions is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion or belief, sex, sexual orientation, gender identity, national origin, disability, veteran status or any other legally-protected characteristic.

We are proud of our people-first and community-focused culture, empowering every Motorolan to be their most authentic self and to do their best work to deliver on the promise of a safer world. If you’d like to join our team but feel that you don’t quite meet all of the preferred skills, we’d still love to hear why you think you’d be a great addition to our team.

We’re committed to providing an inclusive and accessible recruiting experience for candidates with disabilities, or other physical or mental health conditions. To request an accommodation, please complete this Reasonable Accommodations Form so we can assist you.

Motorola Solutions adopte, favorise et promeut les principes de diversité, d’équité et d’inclusion. Nous encourageons et accueillons les candidatures de toutes les personnes qualifiées, quelles que soient leur race, origines ethnique, religion ou croyance, orientation sexuelle, identité et expression sexuelle, statut d’anciens combattants ou tout autre statut protégé par la Loi.

Nous sommes fiers de notre culture axée sur les personnes et les communautés, encourageant ainsi chaque Motorolan d’être la version la plus authentique de lui-même dans ses responsabilités afin de tenir la promesse d’un monde plus sécuritaire.

Si vous souhaitez vous joindre à notre communauté mais croyez que vous ne possédez pas toutes les exigences requises pour le poste convoité, nous aimerions tout de même connaître les raisons pour lesquelles vous pensez être un excellent candidat pour notre équipe.

Nous offrons également des mesures d’adaptation pendant toutes les étapes du processus d’embauche afin de favoriser l’inclusion des personnes vivant avec un handicap physique et/ou mental. Pour demander un aménagement, veuillez remplir ce formulaire d'aménagement raisonnable afin que nous puissions vous aider.