Security Engineer
Job Location:
Monthly Salary:
Posted:
Application Deadline:
Vacancies:
Job Summary
About Us
We are a global climate technologies company engineered for sustainability. We create sustainable and efficient residential commercial and industrial spaces through HVACR technologies. We protect temperature-sensitive goods throughout the cold chain. And we bring comfort to people globally. Best-in-class engineering design and manufacturing combined with category-leading brands in compression controls software and monitoring solutions result in next-generation climate technology that is built for the needs of the world ahead.
Whether you are a professional looking for a career change an undergraduate student exploring your first opportunity or recent graduate with an advanced degree we have opportunities that will allow you to innovate be challenged and make an impact. Join our team and start your journey today!
Senior Security Engineer
Job Description
The Senior Security Engineer will be a hands-on security professional with experience in offensive security embedded systems product security and vulnerability research. This role will be responsible for helping to build mature and support the Copeland Product Security Program. This cross-functional position will work directly with product development teams to assess design test and improve the security of Copeland products and services throughout their lifecycle.
This position will also support Product Security Incident Response Team (PSIRT) activities coordinated vulnerability disclosure and cybersecurity regulatory readiness efforts including the EU Cyber Resilience Act (CRA).
As a Security Engineer You Will:
Product Security Testing & Research
Perform product security testing and reporting including but not limited to:
- Black-box reverse engineering of hardware and firmware
- Vulnerability research
- Exploit development
- Fuzz testing
- Protocol reverse engineering
- Hardware security assessments
- Embedded software security reviews
Penetration Testing
Conduct manual penetration testing of:
- Mobile Applications (iOS & Android)
- Web Applications
- APIs and Microservices
- Cloud Infrastructure
- Network Systems
- IoT Devices
Product Security Engineering
- Facilitate threat modeling with product application infrastructure and engineering teams.
- Conduct architecture and design reviews to identify security weaknesses early in the development lifecycle.
- Support Secure Development Lifecycle (SDL) activities and Secure-by-Design initiatives.
- Review security requirements for connected products and cloud-based solutions.
- Partner with engineering teams to develop effective security controls and mitigations.
PSIRT & Vulnerability Management
- Support Product Security Incident Response Team (PSIRT) operations.
- Investigate and validate externally reported vulnerabilities.
- Coordinate vulnerability triage remediation and disclosure activities.
- Participate in CVE identification CVSS scoring and security advisory development.
- Engage with security researchers vulnerability disclosure programs and industry partners.
- Assist with incident response activities involving Copeland products.
AI & Emerging Technology Security
- Perform security assessments of AI/ML and Generative AI-enabled products and services.
- Evaluate risks associated with AI agents model supply chains prompt injection model poisoning and data leakage.
- Help define security controls for AI-powered products and services.
- Assess third-party AI technologies and integrations for security risk.
Security Awareness & Program Development
- Perform security training and outreach to development and engineering teams.
- Support security champion programs and secure coding initiatives.
- Maintain product security metrics documentation dashboards and operational procedures.
- Assist with continuous improvement of product security tools and processes.
Regulatory & Compliance Support
- Support cybersecurity compliance initiatives related to connected products.
- Assist with vulnerability management and reporting obligations under cybersecurity regulations and standards.
- Collaborate with legal compliance and product teams during product security investigations and regulatory reporting activities.
- Support readiness activities related to regulations such as the EU Cyber Resilience Act (CRA) coordinated vulnerability disclosure processes and secure product development requirements.
Department Summary:
The Copeland Product Security department is focused on ensuring that our products are secure and that we are protecting our customers from relevant cyber threats by proactively identifying addressing and preventing vulnerabilities that could impact the confidentiality integrity availability or safety of our products services and solutions.
We seek individuals with experience and innovative ideas in Product Security Embedded Systems Security IoT Security AI Security and Product Security Incident Response who are passionate about securing connected products and supporting secure-by-design development practices.
Who You Are:
- You look beyond the obvious and do not stop at the first answer.
- You enjoy solving complex technical problems and understanding how systems truly work.
- You are comfortable communicating technical concepts to both technical and non-technical audiences.
- You maintain strong collaborative relationships across diverse teams and locations.
- You challenge assumptions respectfully and are comfortable participating in technical debate.
- You possess a strong sense of ownership accountability and continuous improvement.
- You enjoy learning new technologies and adapting to emerging threats and industry trends.
Minimum Qualifications:
- Bachelors degree in Computer Science Engineering Cybersecurity Information Technology or a related field or equivalent practical experience.
Minimum of 5 years of experience with any combination of the following: embedded systems and IoT securityred teaming or penetration testing.
Experience conducting security testing of embedded hardware and the ability to identify and manipulate debug interfaces (UART JTAG SWD etc.) and peripheral buses (SPI I2C etc.).
Experience performing Binary Reverse Engineering of ARM MIPS and PowerPC firmware using industry-standard tools such as IDA Pro Binary Ninja Ghidra etc.
Experience planning and executing Red Team exercises.
Experience performing Fuzz Testing of industrial communication protocols like Wi-Fi / BLE / Wireless HART / PROFINET/ MODBUS / Ethernet IP/ OPC UA/ HART /FF.
- Understanding of secure boot processes bootloaders cryptographic implementations and trusted execution concepts.
Understanding network web IoT and industrial-related protocols such as TCP/UDP HTTPS MQTTS CoAP Modbus Ethernet/IP DNP3 OPC-UA etc.
Excellent written and verbal communication skills.
Strong analytical skills and problem-solving capabilities.
Preferred Qualifications:
- Experience supporting Product Security Incident Response Team (PSIRT) operations including vulnerability triage CVSS scoring authoring security advisories and coordinated vulnerability disclosure activities.
- Understanding of cybersecurity regulations affecting connected products including EU Cyber Resilience Act (CRA) IEC 62443 NIST Secure Software Development Framework (SSDF).
- Experience working with Cloud Security Architectures.
- Understanding cloud platforms such as AWS Azure Google Cloud.
- Experience with programming languages such as Python C C C# Assembly Go Rust etc.
- Experience with software supply chain security including SBOM generation and analysis Software Composition Analysis (SCA) CI/CD security.
- Knowledge of embedded Linux required knowledge of Real-Time Operating Systems a plus.
- Hands-on experience assessing AI/ML Systems Generative AI Applications LLM-based Applications Autonomous Agents.
- Familiarity with MITRE ATT&CK OWASP Top 10 OWASP Top 10 for LLM Applications.
Our Commitment to Our People
Across the globe we are united by a singular Purpose: Sustainability is no small ambition. Thats why everything we do is geared toward a sustainable futurefor our generation and all those to come. Through groundbreaking innovations HVACR technology and cold chain solutions we are reducing carbon emissions and improving energy efficiency in spaces of all sizes from residential to commercial to industrial.
Our employees are our greatest strength. We believe that our culture of passion openness and collaboration empowers us to work toward the same goal - to make the world a better place. We invest in the end-to-end development of our people beginning at onboarding and through senior leadership so they can thrive personally and professionally.
Flexible and competitive benefits plans offer the right options to meet your individual/family needs. We provide employees with flexible time off plans including paid parental leave (maternal and paternal) vacation and holiday leave.
Together we have the opportunity and the power to continue to revolutionize the technology behind air conditioning heating and refrigeration and cultivate a better future. Learn more about us and how you can join our team!
Our Commitment to Inclusion & Belonging
At Copeland we cultivate a strong sense of inclusion and belonging where individuals of all backgrounds and with diverse perspectives are embraced and treated fairly to enable a stronger workforce. Our employee resource groups play an important role in culture and community building at Copeland.
Equal Opportunity Employer
Copeland is an Equal Opportunity/Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to sex race color religion national origin age marital status political affiliation sexual orientation gender identity genetic information disability or protected veteran status. We are committed to providing a workplace free of any discrimination or harassment.
Required Experience:
IC
About Company
White-Rodgers is a leading manufacturer of thermostats, valves, controls and system protectors for the heating, air conditioning, and refrigeration industry.
