Engineering Manager – Product Security – Software Supply Chain

The objective of R&D Product Security is to reduce the likelihood and potential impact of a cybersecurity incident on SEL and our customers over the next 5 years. Without cybersecurity all three tenets of the SEL mission statement are imperiled: Making Electric Power Safer More Reliable and More Economical.

The strategic pursuit of World-Class Product Security practices is a critical need for SEL and our customers in rising to the challenge of a rapidly evolving security landscape. To meet this need R&D Product Security is expanding our team of experts to equip our product teams and oversee cybersecurity programs. We are seeking a passionate seasoned leader to oversee the processes tools and systems that govern and manage the SEL Software Supply chain and automated security testing. This is a high-impact role contributing to large corporate initiatives such as complying with the EU Cyber Resilience Act and improving the robustness of our Secure SDLC. You will lead supervise and grow a team of security-minded software engineers to deliver these outcomes.

In this role you will design and develop enterprise-grade approaches and best practices that enable SEL to deploy and demonstrate world-class management of its third-party and first-party firmware and software. This includes defining and governing our processes related to selecting components ensuring secure provenance of components that we ingest managing Software Bills of Materials and managing licenses and risks associated with those components. This will also include defining programs for strengthening relationships with key vendors and sponsorship and/or contribution to key open-source projects.

You will also oversee the SEL approach to programming languages and automated security QA such as automated coding standards linting fuzzing and static analysis that complement our software ingestion processes. You will identify best-in-class tools (as well as AI-driven approaches) and work with the Secure SDLC Automation DevTools and product teams to implement solutions and drive improved efficient security outcomes.

You will serve as a trusted advisor and consultant for product teams ensuring that SEL continues to excel at delivering products with world-class security!

Essential Duties and Responsibilities

Oversee and improve product security programs related to the SEL software supply chain and relevant standards and regulations (such asand the Cyber Resilience Act).

Oversee the definition selection deployment and associated product outcomes for automated security QA processes and tools.

Maintain awareness of developing trends technologies and threats related to the secure SDLC.

Supervise lead mentor and grow a team of software engineers.

Represent SEL at software industry conferences as needed.

Model teach and apply SEL values and the Principles of Operations.

Required Qualifications

• B.S. degree in Computer Science or equivalent experience.
• 8 years software product development experience across the full Secure SDLC including at least one of the following areas: Embedded development Cloud-native development Web development
• 3 years of experience with technical leadership in software development.
• Demonstrated proficiency with multiple programming languages
• Demonstrated experience with software supply chain practices and tools
• Excellent leadership and communication skills
• Ability to learn new skills and assume new responsibilities
• Willingness to travel occasionally (<10%)

Preferred Qualifications

• Experience with hiring supervising and growing a team
• Experience with using AI effectively in the SDLC.
• Experience with contributing to open-source projects.
• Knowledge of vulnerability management and disclosure practices
• Knowledge of cybersecurity risk assessment practices
• Knowledge of IECand the Cyber Resilience Act