Sr. Product Security Engineer

## Sr. Product Security Engineer応募:
月曜日から木曜日は同僚とともに出社勤務、金曜日は業務内容に応じて勤務場所を選択できます。:
Minneapolis, Minnesota:
フルタイム:
募集開始 - 昨日:
JR-16393私たちのミッションにぜひご参加ください。建物、住宅、輸送分野において、快適で持続可能かつ効率的な気候ソリューションを提供する世界的リーダーとして、私たちには地球を最優先する責任があります。私たちにとってトレーン・テクノロジーズ、および当社の事業(〜を含む)を通じてトレーン登録商標およびサーモキングサステナビリティは、私たちのビジネスの手法であるだけでなく、ビジネスそのものです。世界が直面する課題を、インパクトのある可能性として捉える勇気はありますか?より良い未来の実現に貢献したいとお考えですか?もし答えが「はい」なら、持続可能な世界のために、共に新たな可能性へ大胆に挑戦する仲間として、ぜひご検討ください。当社について詳しく知る福利仕事でも家庭でもあなたがより豊かに活躍できるよう設計されています。私たちは果敢に前進します。**作業場所:**月曜日から木曜日は同僚とともに出社勤務、金曜日は業務内容に応じて勤務場所を選択できます。
*
* What’s in it for you:

** Thermo King is hiring an experienced
** Senior Product Security Engineer
** to work on the creation and implementation of secure embedded software by demonstrating a comprehensive understanding of secure by design principles to support the next-generation transport refrigeration and mobile HVAC controls platform while meeting vehicle cybersecurity and software-update regulatory type-approval  this role, you will lead the cross-product efforts to regularly assess threats and vulnerabilities, perform Security DFMEA, and review penetration tests & threat modeling reports on products throughout its lifecycle.

You will use the findings from new threats to improve processes and productivity by providing guidance and implementing priority updates based on findings. Your tasks include developing and capturing requirements, coordinating implementation, and helping the team to deliver product security goals. You will work closely with Systems, Hardware, Software, and teams to understand customer needs, align product security with overall practices, and define effective product security solutions and oversee their development.
*
* What you will do:

**
* *
* Risk Management:

** Assess product security risks in a maintained register, develop comprehensive mitigation strategies, and evaluate technical and business trade-offs.
* ** Lead Security

Activities:

** Apply the Secure Development Lifecycle and lead product security processes including architectural analysis, threat modeling, security DFMEA, penetration testing, attack modeling and simulation, cybersecurity type-approval activities including TARA per ISO/SAE 21434, and data privacy impact assessments.
* ** Vulnerability Management:
** Identify, evaluate, and verify security issues discovered through automated testing, penetration testing, and customer feedback. Maintain and track closure of vulnerability backlogs.
* ** Compliance & Standards:
** Interpret and enforce product security requirements, conduct vulnerability reviews, and ensure compliance with automotive and industrial cybersecurity regulations and standards (UNECE R155, UNECE R156, ISO/SAE 21434, ISO 24089, GB , IEC 62443, NIST, and applicable regional data-privacy laws).
* ** Regulatory Type Approval & Management Systems:
** Support vehicle cybersecurity and software-update type approval by maintaining Cyber Security Management System (CSMS) and Software Update Management System (SUMS) processes and evidence aligned to regulations and standards.
* ** Secure Updates & Cryptographic Assurance:
** Define and validate…