Product Security Leader; REMOTE

Position: Product Security Leader (REMOTE)
Dover is a diversified global manufacturer with annual revenue of $8 billion. We deliver innovative equipment and components, specialty systems, consumable supplies, software and digital solutions, and support services through five operating segments:
Engineered Products, Clean Energy & Fueling, Imaging & Identification, Pumps & Process Solutions and Climate & Sustainable Technologies. Dover combines global scale with operational agility to lead the markets we serve. We are recognized for our entrepreneurial approach for 70 years, our team of approximately 24,000 employees has an ownership mindset, collaborating with customers to redefine what's possible.

Headquartered in Downers Grove, Illinois, Dover trades on the New York Stock Exchange under "DOV." Additional information is available

The Role: The Product Security Leader is responsible for the implementation and execution of product security programs and practices to support one or more business units at Dover Corp. This position works across IoT, software, and cloud development teams to identify component and system level security risks, evaluate critical failure points, define appropriate technical controls, and partner with cross functional teams to implement security features aligned to product roadmaps.

This role will be based at our Downers Grove, IL location or remote.

Essential Duties/Principal Responsibilities include, but are not limited to:

• Define, implement, and maintain the product security strategy for multiple business unit product portfolios covering IoT and smart device suites.

• Review and evolve the application and infrastructure security architecture, including security principles, patterns, and minimum standards used across product teams.

• Partner with Dev Ops, systems, and product engineering teams to guide product level security design decisions, ensuring new solutions, products, and modules align with approved security patterns and organizational risk tolerance.

• Conduct full lifecycle security design and architecture assessments for a wide range of products, including embedded devices, enterprise software solutions, cloud applications, and mobile apps.

• Serve as the security authority for product design reviews, identifying architectural risks, defining required mitigations or compensating controls, and supporting security-related release decisions.

• Champion the Secure SDLC, including security requirements, threat modeling, security testing, penetration testing, vulnerability remediation, and release readiness across all business unit products.

• Own product security risk management, including documenting and tracking identified risks, managing security exceptions, and validating remediation of high risk findings.

• Implement or manage the implementation of common application security controls and reusable security mechanisms across product portfolios.

• Assess and manage software supply chain security risks, including third party components, open source dependencies, and product vulnerability exposure.

• Partner with incident response and PSIRT functions to support product security incidents, coordinated vulnerability disclosure, and customer remediation activities.

• Support commercial and customer facing teams by building customer trust in the security of Dover products through security reviews, technical discussions, and responses to customer security inquiries.

• Provide expert level operational support for customer security escalations, including root cause analysis and mitigation planning.

• Provide guidance and technical leadership on secure software and firmware development best practices, helping drive consistent security maturity across development teams.

Minimum Qualifications:
Education, Experience, Skills, Abilities, License/Certification:

• BS in a technical discipline with 5-7+ years of experience

• Demonstrated expertise in product/application security architecture, Network security, application security, web services

• Experience with SAST, DAST, SCA and penetration testing tools

• In-depth experience identifying and protecting against web application and web service security vulnerabilities including…