Summary

MathWorks has a hybrid work model that enables staff members to split their time between office and home. The hybrid model provides the advantage of having both in-person time with colleagues and flexible at-home life optimizations. Learn More: https://www.mathworks.com/company/jobs/resources/applying-and-interviewing.html#onboarding.

Come join our highly visible, fast-growing software product security team where you will have a high impact on the security of all MathWorks products and online services.

As a senior member of the team, you will take on a leadership role in key security projects. You will drive strategic security initiatives, build innovative tools, develop security architecture insights, track emerging threats, and enable us to achieve world-class security for MATLAB, Simulink, Mobile, IoT, Web, MATLAB Online and Server Products.

MathWorks staff enjoy a hybrid work-from-home model featuring both home-office flexibility as well as in-office meeting days for optimized collaboration.

MathWorks nurtures growth, appreciates inclusivity, encourages initiative, values teamwork, shares success, and rewards excellence.

Responsibilities

Guide teams in the adoption of Secure Development practices including Threat Modeling, Security Architecture review, Static/dynamic and secure coding practices.
Improve security standards, processes, and tooling to support MathWorks Product and services and shift left of security within the development lifecycle
Improve security standards, processes, and tooling into CI/CD pipelines (SAST, DAST, dependency scanning, IaC scanning, policy enforcement) to support MathWorks Product and services and shift left of security within the development lifecycle
Perform vulnerability management, including open-source software
Provide application security expertise to support vulnerability response process
Perform penetration testing of different products and applications
Experience with application security such as OWASP Top 10
Collaborate with external security researchers
Ability and passion to coach and mentor junior members of the security team
Ability to analyze and solve complex problems

Minimum Qualifications

A bachelor's degree and 6 years of professional work experience (or a master's degree and 3 years of professional work experience, or a PhD degree, or equivalent experience) is required.

Additional Qualifications

Proficient in one or more programming languages (Python/C++/JavaScript)
Demonstrated experience in triaging findings from security tools, penetration testing, bug bounty programs, and the external research community
Strong understanding of application security assessment techniques, threat modeling, general secure software development practices
Secure AI/ML-driven applications by addressing risks such as data exposure, model misuse, and prompt injection across applications
Effective communications and influence with senior management and product teams

Senior Product Security Engineer