Senior Professional, Product Security Expert
Danfoss A/S · Oragadam, IN, 602 105 · India · On-site
Sign up free: we match you to jobs like this, tailor your application and fill the form. 2 free applications every day.
The Impact You'll Make
We are looking for a Product Security professional to join a central Product Security function responsible for enabling, guiding and governing product security across the organization.
In this role, you will act as a trusted advisor and enabler to engineering teams. You will help them integrate security across product design, development, delivery and operations by building scalable practices, capabilities , services and cross-organization initiatives .
As part of the central team, you will also contribute to defining security requirements , measuring maturity through the organization, reviewing product architectures and collecting security metrics .
What You’ll Be Doing
Enable R&D Teams Act as a trusted advisor, providing guidance and coaching to integrate security into product design and development.
Drive Product Security Maturity Assess and improve security maturity across teams through standards, assessments, and best practices .
Secure-by-Design & Architecture Support threat modeling, architecture reviews , and early identification of risks.
Regulatory Expertise (EU) Translate regulations such as CRA and RED into practical engineering requirements and support compliance readiness.
Secure Development Practices Promote secure coding, vulnerability management, and security testing approaches .
Secure CICD : Promote DevSecOps best practices in collaboration with the toolchain team, including policy management, security testing tool automation, etc.
Supply Chain Security Guide teams on managing third-party risks , including SBOM and vulnerability tracking.
What We're Looking For
Solid experience of 8+ years in Product Security, Embedded Security or Application Security.
Strong understanding of secure system design and architecture
Experience working with or supporting engineering / R&D teams
Knowledge of cybersecurity standards (e.g., IEC 62443, ISO 21434, etc.)
Ability to translate security concepts into practical guidance.
Experience with cybersecurity regulations (CRA, RED, etc.) and their harmonized standards
Knowledge of authentication protocols, PKI, product certificates (incl. provisioning) , and key management.
Hands-on experience DevSecOps practices , security testing tool and CI/CD security and pipline integration.
AI literacy and application , including understanding how AI is used within products and across development lifecycle, associated security risks, and the ability to leverage AI tools to improve the scalability and efficiency of product security activities.
Background in IoT, industrial, or connected products
What You'll Get from Us
At Danfoss, you’ll join a global organization committed to engineering solutions that make a difference . You’ll collaborate with passionate colleagues across regions and disciplines, working on meaningful challenges in connected and industrial technologies.
We invest in your growth through…