Sr. Product Security Engineer at TP Link Technologies Co Ltd USA

Irvine, California, United States -

Full Time

Start Date

Immediate

Expiry Date

16 Mar, 26

Salary

190000.0

Posted On

16 Dec, 25

Experience

10 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

Security Architecture, Secure Coding Practices, Threat Modeling, Risk Assessment, Security Testing Tools, Regulatory Requirements, IoT Protocols, Embedded Systems Security, Cryptography, Cloud-Connected Devices, Incident Response, Security Governance, Security Metrics, Zero Trust Architecture, Software Bill of Materials Management

Industry

Computers and Electronics Manufacturing

Description

About Us: Headquartered in the United States, TP-Link Systems Inc. is a global provider of reliable networking devices and smart home products, consistently ranked as the world’s top provider of Wi-Fi devices. The company is committed to delivering innovative products that enhance people’s lives through faster, more reliable connectivity. With a commitment to excellence, TP-Link Systems serves customers in over 170 countries and continues to grow its global footprint. We believe technology changes the world for the better! At TP-Link Systems Inc, we are committed to crafting dependable, high-performance products to connect users worldwide with the wonders of technology. Embracing professionalism, innovation, excellence, and simplicity, we aim to assist our clients in achieving remarkable global performance and enable consumers to enjoy a seamless, effortless lifestyle. Overview: TP-Link Systems Inc. is seeking a skilled and proactive Sr. Product Security Engineer to play a critical role in defining and driving the security architecture and design for the company’s network equipment and smart home product lines. This position will ensure that all products are secure by design, meeting the highest industry standards while addressing emerging threats in a rapidly evolving landscape. You will collaborate closely with cross-functional teams, including engineering, product management, and operations, to embed security into the entire product lifecycle. Key Responsibilities: Security Architecture Design and Review: Partner with the engineering, product management, and operations teams on the development and implementation of security architecture strategies for network equipment and smart home products. Collaborate with engineering teams to ensure security is integrated into product designs from concept to deployment. Conduct architecture reviews, threat modeling, and security assessments to identify and mitigate risks. Secure Development Lifecycle (SDLC) Leadership: Establish and enforce secure coding practices and design principles across all product development teams. Partner with development teams to integrate security tools and processes into CI/CD pipelines. Define and manage security requirements to ensure compliance with regulatory and industry standards (e.g., EU-CRA, GDPR, NIST CSF, ISO 27001). Emerging Threats and Technology Trends: Stay informed about new attack vectors, vulnerabilities, and security technologies relevant to IoT, smart home, and networking products. Provide expert guidance on addressing emerging threats and integrating innovative security solutions. Support incident response teams during product-related security incidents and postmortems. Product Security Governance: Develop and enforce policies and standards for secure product design and development. Define and maintain a security architecture framework, ensuring consistency across all product lines. Partner with leadership to define key security metrics and report on the product security posture. Qualifications: Education: Bachelor’s degree in Computer Science, Cybersecurity, or a related field. Master’s degree preferred. Experience: 8+ years of experience in product security, security architecture, or equivalent roles. Proven track record in designing and implementing security architectures for IoT or embedded systems. Experience working with network equipment or smart home product manufacturers is highly desirable. Skills: Deep understanding of secure software development, cryptography, and hardware security principles. Proficient in threat modeling, risk assessment, and security testing tools. Strong knowledge of regulatory requirements and industry standards (e.g., OWASP, CSA, NIST, EN 303 645). Hands-on experience with cloud-connected devices, IoT protocols (e.g., MQTT, CoAP), and embedded systems security. Preferred Qualifications: Relevant certifications, such as CSSLP, CISSP, or SABSA. Experience with SBOM (Software Bill of Materials) management and related tools. Familiarity with Zero Trust Architecture principles and application to product security. Salary range: $140,000-$190,000 At TP-Link Systems Inc., we are continually searching for ambitious individuals who are passionate about their work. We believe that diversity fuels innovation, collaboration, and drives our entrepreneurial spirit. As a global company, we highly value diverse perspectives and are committed to cultivating an environment where all voices are heard, respected, and valued. We are dedicated to providing equal employment opportunities to all employees and applicants, and we prohibit discrimination and harassment of any kind based on race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state, or local laws. Beyond compliance, we strive to create a supportive and growth-oriented workplace for everyone. If you share our passion and connection to this mission, we welcome you to apply and join us in building a vibrant and inclusive team at TP-Link Systems Inc. Please, no third-party agency inquiries, and we are unable to offer visa sponsorships at this time.

Responsibilities

The Sr. Product Security Engineer will define and drive the security architecture for network equipment and smart home products, ensuring security is integrated throughout the product lifecycle. Responsibilities include conducting architecture reviews, establishing secure coding practices, and staying informed about emerging threats.