Sr. Product Security Engineer

Role Overview: Driven by transformative digital technologies and trends, RIB aims to propel the industry forward by making engineering and construction more efficient and sustainable. With a team of over 2,500 talented individuals from diverse cultures and backgrounds, RIB delivers end-to-end lifecycle solutions to empower the industry to build better. As a Senior Product Security Engineer at RIB, you will play a crucial role in ensuring the security of assigned RIB Software products and embedding security into every stage of the products' lifecycles. Key Responsibilities: - Execute secure development lifecycle (SDL) requirements across the full product development lifecycle. - Drive regular threat modeling, security reviews, and risk assessments for assigned products. - Track and manage product-specific security issues through resolution, communicating status to leadership. - Manage supply chain security risks for externally provided components used within the product. - Collect and maintain compliance evidence for compliance requirements. - Coordinate security activities with development teams through Security Architects and Product Owners. - Identify and refine security requirements applicable to the product across its lifecycle. - Serve as the primary contact for customer security discussions, assessments, and vulnerability disclosure. - Support security training and assessment initiatives to ensure product teams have demonstrated security expertise. - Mentor assigned Product Security Engineers through collaborative review and guidance. - Contribute to the security architecture and roadmap by advising on evolving threats and new technologies. - Leverage AI tools to accelerate security reviews, threat modeling, and vulnerability analysis. Qualifications Required: - 5+ years experience in product security or application security. - Strong understanding of SDL processes and security compliance frameworks. - Proven ability to conduct security testing using SAST, DAST, and SCA tools. - Familiarity with languages such as C#, Typescript, Java, JavaScript, Dart, C++, Python, and/or Delphi. - Experience with vulnerability management and risk assessment. - Excellent communication skills for technical and business stakeholders. - Project management experience with cross-functional teams. - Ability to drive improvements in security culture. - Bachelor's degree in Computer Science, Cybersecurity, or related field, or equivalent professional experience. Additional Details: RIB offers a competitive salary and benefits package, as well as opportunities for professional growth and development. The company values diversity and is committed to creating an inclusive culture where all employees are treated with dignity and respect. Background checks may be required for successful applicants in accordance with local laws. RIB is an Equal Opportunity Employer, fostering a workplace environment that encourages innovation and collaboration to build a better world. Role Overview: Driven by transformative digital technologies and trends, RIB aims to propel the industry forward by making engineering and construction more efficient and sustainable. With a team of over 2,500 talented individuals from diverse cultures and backgrounds, RIB delivers end-to-end lifecycle solutions to empower the industry to build better. As a Senior Product Security Engineer at RIB, you will play a crucial role in ensuring the security of assigned RIB Software products and embedding security into every stage of the products' lifecycles. Key Responsibilities: - Execute secure development lifecycle (SDL) requirements across the full product development lifecycle. - Drive regular threat modeling, security reviews, and risk assessments for assigned products. - Track and manage product-specific security issues through resolution, communicating status to leadership. - Manage supply chain security risks for externally provided components used within the product. - Collect and maintain compliance evidence for compliance requirements. - Coordinate security activities with development teams through Security Architects and Product Owners. - Identify and refine security requirements applicable to the product across its lifecycle. - Serve as the primary contact for customer security discussions, assessments, and vulnerability disclosure. - Support security training and assessment initiatives to ensure product teams have demonstrated security expertise. - Mentor assigned Product Security Engineers through collaborative review and guidance. - Contribute to the security architecture and roadmap by advising on evolving threats and new technologies. - Leverage AI tools to accelerate security reviews, threat modeling, and vulnerability analysis. Qualifications Required: - 5+ years experience in product security or application security. - Strong understanding of SDL processes and security compliance frameworks. - Proven ability to conduct security testing using SAST,