Technical Lead, Security Embedded Engineering

Founded in 2011, Toyota Tsusho Systems US, Inc. (TTS-US) is a Toyota group company, that develops IT solutions wherever global businesses operate. Transforming into a technology and mobility company, TTS-US with it's 8 TTS affiliates worldwide is establishing a secure and resilient Toyota global value chain. The creative capacity to forge such limitless business opportunities is one of the strengths of Toyota Tsusho Systems.

The Technical Lead, Security Embedded Engineering leads a team of Security Embedded Engineers supporting a client engagement while also serving as an individual contributor. The role provides technical direction, delivery oversight, and hands-on application and cloud security expertise. In addition to leading the team, the Technical Lead receives and executes security engineering tasks directly from the client, ensuring work is delivered accurately, securely, and in alignment with client priorities and program objectives.

• Lead, mentor, and provide technical direction to Security Embedded Engineers supporting the client engagement.
• Serve as a senior technical liaison to the client, receiving, clarifying, prioritizing, and delivering assigned security engineering tasks.
• Translate client needs, security findings, and program objectives into actionable work plans for the embedded engineering team.
• Provide technical oversight through design reviews, code reviews, architecture reviews, and quality assurance of team deliverables.
• Establish and enforce standards for secure design, code quality, testing, documentation, observability, reliability, and operational readiness.
• Track delivery progress, risks, dependencies, and resource capacity; communicate status, risks, and recommendations to client and internal stakeholders.
• Coordinate effectively with client engineering, infrastructure, product, operations, and security teams.

• Perform hands‑on security engineering work directly assigned by the client, including application security assessments, cloud security reviews, vulnerability remediation, and secure‑development initiatives.
• Develop and maintain secure applications, services, integrations, and infrastructure using Java, Go, AWS services, and related technologies; mobile application‑security support is a plus.
• Conduct static and dynamic application security testing to identify vulnerabilities; create detailed reports, evidence, remediation guidance, and validation artifacts.
• Work with client development teams to prioritize, remediate, and validate identified application‑security vulnerabilities.
• Assess and improve the security posture of AWS cloud environments, including identity and access management, network security, logging, monitoring, encryption, and configuration controls.
• Design, implement, and maintain application security controls, countermeasures, and secure engineering patterns.
• Support secure CI/CD practices using Git Lab, including source‑control governance, automated testing, security scanning, and release controls.
• Use Datadog and AWS monitoring tools to improve system observability, investigate anomalies, and support operational reliability.
• Respond to security incidents and infrastructure issues by investigating events, implementing countermeasures, coordinating recovery activities, and documenting root cause and corrective actions.
• Participate in security research, proof‑of‑concept testing, tool evaluations, and assessments of emerging threats relevant to the client environment.
• Identify recurring security or infrastructure issues and drive preventative, scalable improvements.

• Strong hands‑on technical…