Sierra Wireless, recently acquired by Semtech, is an Internet of Things (IoT) solutions provider with its main offices located in Richmond, British Columbia, Canada. We sell mobile computing and machine-to-machine (M2M) communication products that work over cellular networks, 2G, 3G, 4G and 5G mobile broadband wireless routers and gateways, modules as well as software, tools, and services. Semtech Corporation (Nasdaq: SMTC), is a high-performance semiconductor, IoT systems and Cloud connectivity service provider dedicated to delivering high quality technology solutions that enable a smarter, more connected and sustainable planet. For more information, visit www.sierrawireless.com and www.semtech.com .
Our Commitment to Inclusion, Equity and Diversity
At Sierra Wireless diversity is valued and celebrated. We strive to foster an inclusive organization. As a proud equal opportunity employer, we welcome people of every race, color, religion, sex, sexual orientation, gender perception or identity, national origin, age, marital status, protected veteran status, or disability status to grow their careers here.
Job Summary
We are looking for a Senior Staff Product Security Engineer to join the AirLink Gateway & Router team to own the product security practices and help implement, deploy and measure a balanced software security assurance program with clear measurable steps. Focus will be on the full range of hardware and software development practices from requirements gathering through to construction, verification and deployment. You will also work with the Product Security Architecture team to define, develop and promote adoption of governance and strategic corporate product & manufacturing security features.
Internally you'll be working cross-functionally with the product teams - product line managers, project managers, development and validation engineers - as well as the certification team and manufacturing. In this role you will also be responsible for interfacing and coordinating activities with security professionals from our customers, mobile operators and penetration testing security firms.
Occasional travel to headquarters is required as well as to Sierra Wireless' global engineering and factory locations per demands of the business.
This is a regular, full-time position, where you'll be working in a hybrid environment both from home and at the office (when applicable).
Responsibilities
- Work with Product Management and Engineering to define the threat model and resulting security requirements and recommendations for Sierra Wireless devices.
- Oversee design, implementation, and testing of security features in Sierra Wireless devices in alignment with overall Sierra Wireless end-to-end product security initiatives.
- Participate in customer meetings to discuss Sierra Wireless' security posture and understand deployment use cases and respective security requirements.
- Work with 3rd parties to perform or supervise vulnerability testing, risk analyses and security assessments.
- Work with technology suppliers to ensure they are following best security practices that align with Sierra's product and security requirements.
- Participate, and in some cases lead, security-related Incident Response and provide thorough remedial solutions and analysis.
- Review and improve existing Secure Software Development Lifecycle (SSDLC) practices of the AirLink product teams and produce a roadmap for improvement.
Required Education, Experience & Skills
- Bachelor's Degree or equivalent in Information Systems Management, Information Security & Assurance, Computer Science, or Computer Engineering
- Certifications should include CSSLP, CISSP, CEH, CCSP, or similar industry-recognized security certifications
- 7+ years of relevant Product Security experience
- 3+ years software development experience or exposure to programming in one or more of Java, C, C++, or Python
- Familiarity with Software Development methodologies such as Waterfall and Agile
- Experience with static and dynamic code analysis practices
- Experience using major operating systems including Windows and Linux as well as embedded operating systems
- Knowledge of major product security regulations and standards globally including ISO 62443, CCPA, ISO 15408 (Common Criteria), FedRAMP, CMMC, and CSA STAR.
- Ability to handle multiple simultaneous priorities either directly or through delegation
- Ability to work independently and take ownership of tasks through to completion
- Excellent written and interpersonal skills
- Active participation in the security community including Capture the Flag (CTF) events, conferences, and community groups to maintain knowledge and advance the state of security globally
What We Offer
Our people are friendly, collaborative, and like to share their ideas and knowledge with one another. This creates an amazing environment where we learn from each other and innovate together.
Our Canadian benefits include paid vacation and sick days, extended health and dental insurance, vision care, life insurance, short-term and long-term disability, matching retirement savings program, and employee and family assistance programs.
Our Richmond headquarters offers a subsidized cafeteria, free parking, free shuttle service from Skytrain, a Wellness Program that includes activities and challenges to keep our minds and bodies active. We also host various social events throughout the year where we have fun and celebrate. Within our Global Inclusion and Diversity Program, our Employee Resource Groups provide opportunities for our people to support and champion Women in Tech, Emerging Professionals, Pride@Sierra, and Mental Health Awareness.
If you like working with a successful team, are looking for competitive salary and benefits, and the opportunity to represent a recognized and innovative brand, we'd love to have you join our team!
How to Apply
Please submit your resume online through our careers website using the "Apply" button below. If you are a job seeker with a disability and you need individualized support during the application or interview process, please leave us a note on your application form.
We thank you for your application and appreciate your interest in Sierra Wireless, however only shortlisted candidates will be contacted.