{"id":3890091,"url":"https://alion.io/job/copeland-security-engineer","title":"Security Engineer","company":{"id":1847558,"name":"Copeland","domain":"copeland.com","url":"https://alion.io/company/copeland-com","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":80,"open_postings":69,"ghost_share":0,"stale_share":0.812,"repost_share":0,"time_to_fill_p50_days":34,"computed_at":"2026-11-06T05:58:05Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Pune, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"Binary Ninja","optional":false},{"name":"CoAP","optional":false},{"name":"CVE","optional":false},{"name":"CVSS","optional":false},{"name":"DNP3","optional":false},{"name":"Ghidra","optional":false},{"name":"IDA Pro","optional":false},{"name":"OPC UA","optional":false},{"name":"Red Teaming","optional":false},{"name":"SDL","optional":false},{"name":"Threat Modeling","optional":false},{"name":"Wi-Fi","optional":false},{"name":"Assembly","optional":true},{"name":"AWS","optional":true},{"name":"Azure","optional":true},{"name":"C","optional":true},{"name":"C#","optional":true},{"name":"C++","optional":true},{"name":"CI/CD","optional":true},{"name":"GCP","optional":true},{"name":"Linux","optional":true},{"name":"LLM","optional":true},{"name":"MITRE ATT&CK","optional":true},{"name":"OWASP Top 10","optional":true},{"name":"Python","optional":true},{"name":"Rust","optional":true},{"name":"SBOM","optional":true}],"status":"live","first_seen_at":"2026-11-06T20:57:43Z","employer_posted_date":"2026-11-06","last_verified_at":"2026-11-07T02:21:53Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"About Us\nWe are a global climate technologies company engineered for sustainability. We create sustainable and efficient residential, commercialand industrial spaces through HVACR technologies. We protect temperature-sensitivegoods throughout the cold chain. And we bring comfort to people globally. Best-in-class engineering, design and manufacturing combined with category-leading brands in compression, controls, softwareand monitoring solutions result in next-generation climate technology that is built for the needs of the world ahead.\nWhether you are a professional looking for a career change, an undergraduate student exploring your first opportunity, or recent graduate with an advanced degree, we have opportunities that will allow you to innovate, be challenged and make an impact. Join our team and start your journey today!\nSenior Security Engineer\nJob Description\nThe Senior Security Engineer will be a hands-on security professional with experience in offensive security, embedded systems, product security, and vulnerability research. This role will be responsible for helping to build, mature, and support the Copeland Product Security Program. This cross-functional position will work directly with product development teams to assess, design, test, and improve the security of Copeland products and services throughout their lifecycle.\nThis position will also support Product Security Incident Response Team (PSIRT) activities, coordinated vulnerability disclosure, and cybersecurity regulatory readiness efforts including the EU Cyber Resilience Act (CRA).\nAs a Security Engineer, You Will:\nProduct Security Testing & Research\nPerform product security testing and reporting, including but not limited to:\nBlack-box reverse engineering of hardware and firmware\nVulnerability research\nExploit development\nFuzz testing\nProtocol reverse engineering\nHardware security assessments\nEmbedded software security reviews\nPenetration Testing\nConduct manual penetration testing of:\nMobile Applications (iOS & Android)\nWeb Applications\nAPIs and Microservices\nCloud Infrastructure\nNetwork Systems\nIoT Devices\n\nProduct Security Engineering\nFacilitate threat modeling with product, application, infrastructure, and engineering teams.\nConduct architecture and design reviews to identify security weaknesses early in the development lifecycle.\nSupport Secure Development Lifecycle (SDL) activities and Secure-by-Design initiatives.\nReview security requirements for connected products and cloud-based solutions.\nPartner with engineering teams to develop effective security controls and mitigations.\nPSIRT & Vulnerability Management\nSupport Product Security Incident Response Team (PSIRT) operations.\nInvestigate and validate externally reported vulnerabilities.\nCoordinate vulnerability triage, remediation, and disclosure activities.\nParticipate in CVE identification, CVSS scoring, and security advisory development.\nEngage with security researchers, vulnerability disclosure programs, and industry partners.\nAssist with incident response activities involving Copeland products.\nAI & Emerging Technology Security\nPerform security assessments of AI/ML and Generative AI-enabled products and services.\nEvaluate risks associated with AI agents, model supply chains, prompt injection, model poisoning, and data leakage.\nHelp define security controls for AI-powered products and services.\nAssess third-party AI technologies and integrations for security risk.\nSecurity Awareness & Program Development\nPerform security training and outreach to development and engineering teams.\nSupport security champion programs and secure coding initiatives.\nMaintain product security metrics, documentation, dashboards, and operational procedures.\nAssist with continuous improvement of product security tools and processes.\nRegulatory & Compliance Support\nSupport cybersecurity compliance initiatives related to connected products.\nAssist with vulnerability management and reporting obligations under cybersecurity regulations and standards.\nCollaborate with legal, compliance, and product teams during product security investigations and regulatory reporting activities.\nSupport readiness activities related to regulations such as the EU Cyber Resilience Act (CRA), coordinated vulnerability disclosure processes, and secure product development requirements. \nDepartment Summary:\nThe Copeland Product Security department is focused on ensuring that our products are secure and that we are protecting our customers from relevant cyber threats by proactively identifying, addressing, and preventing vulnerabilities that could impact the confidentiality, integrity, availability, or safety of our products, services, and solutions.\nWe seek individuals with experience and innovative ideas in Product Security, Embedded Systems Security, IoT Security, AI Security, and Product Security Incident Response who are passionate about securing connected products and supporting secure-by-design development practices.\nWho You Are:\nYou look beyond the obvious and do not stop at the first answer.\nYou enjoy solving complex technical problems and understanding how systems truly work.\nYou are comfortable communicating technical concepts to both technical and non-technical audiences.\nYou maintain strong collaborative relationships across diverse teams and locations.\nYou challenge assumptions respectfully and are comfortable participating in technical debate.\nYou possess a strong sense of ownership, accountability, and continuous improvement.\nYou enjoy learning new technologies and adapting to emerging threats and industry trends.\nMinimum Qualifications:\nBachelor’s degree in Computer Science Engineering, Cybersecurity, Information Technology, or a related field, or equivalent practical experience.\n· Minimum of 5 years of experience with any combination of the following: embedded systems and IoT security, red teaming, or penetration testing.\n· Experience conducting security testing of embedded hardware and the ability to identify and manipulate debug interfaces (UART, JTAG, SWD, etc.) and peripheral buses (SPI, I2C, etc.).\n· Experience performing Binary Reverse Engineering of ARM, MIPS, and PowerPC firmware using industry-standard tools such as IDA Pro, Binary Ninja, Ghidra, etc.\n· Experience planning and executing Red Team exercises.\n· Experience performing Fuzz Testing of industrial communication protocols like Wi-Fi / BLE / Wireless HART / PROFINET/ MODBUS / Ethernet IP/ OPC UA/ HART /FF.\nUnderstanding of secure boot processes, bootloaders, cryptographic implementations, and trusted execution concepts.\n· Understanding network, web, IoT, and industrial-related protocols such as TCP/UDP, HTTPS, MQTTS, CoAP, Modbus, Ethernet/IP, DNP3, OPC-UA, etc.\n· Excellent written and verbal communication skills.\n· Strong analytical skills and problem-solving capabilities.\nPreferred Qualifications:\nExperience supporting Product Security Incident Response Team (PSIRT) operations, including vulnerability triage, CVSS scoring, authoring security advisories, and coordinated vulnerability disclosure activities.\nUnderstanding of cybersecurity regulations affecting connected products, including EU Cyber Resilience Act (CRA), IEC 62443, NIST Secure Software Development Framework (SSDF).\nExperience working with Cloud Security Architectures.\nUnderstanding cloud platforms such as AWS, Azure, Google Cloud.\nExperience with programming languages such as Python, C, C++, C#, Assembly, Go, Rust, etc.\nExperience with software supply chain security, including SBOM generation and analysis, Software Composition Analysis (SCA), CI/CD security.\nKnowledge of embedded Linux required, knowledge of Real-Time Operating Systems a plus.\nHands-on experience assessing AI/ML Systems, Generative AI Applications, LLM-based Applications, Autonomous Agents.\nFamiliarity with MITRE ATT&CK, OWASP Top 10, OWASP Top 10 for LLM Applications.\nOur Commitment to Our People\nAcross the globe, we are united by a singular Purpose: Sustainability is no small ambition. That’swhy everything we do is geared toward a sustainable future-for our generation and all those to come. Through groundbreaking innovations, HVACR technology and cold chain solutions, we are reducing carbon emissions and improving energy efficiency in spaces of all sizes, from residential to commercial to industrial.\nOur employees are our greatest strength. We believe that our culture of passion, openness, and collaboration empowers us to work toward the same goal - to make the world a better place. We invest in the end-to-end development of our people, beginning at onboarding and through senior leadership, so they can thrive personally and professionally.\nFlexible and competitive benefits plans offer the right options to meet your individual/family needs.We provide employees with flexible time off plans, including paid parental leave (maternal and paternal), vacation and holiday leave.\nTogether, we have the opportunity - and the power - to continue to revolutionize the technology behind air conditioning, heatingand refrigeration, and cultivate a better future. Learn more about us and how you can join our team!\nOur Commitment to Inclusion & Belonging\nAt Copeland, we cultivate a strong sense of inclusion and belonging where individuals of all backgrounds, and with diverse perspectives, are embraced and treated fairly to enable a stronger workforce. Our employee resource groups play an important role in culture and community building at Copeland.\nEqual Opportunity Employer\nCopeland is an Equal Opportunity/AffirmativeAction employer. All qualified applicants will receive consideration for employment without regard to sex, race, color, religion, national origin, age, marital status, political affiliation, sexual orientation, gender identity, genetic information, disability or protected veteran status. We are committed to providing a workplace free of any discrimination or harassment.","description_format":"text","description_chars":9945,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Flexible time off","Parental leave"],"hiring_locations":[{"name":"India","iso":"IN","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Industrial Machinery","Application Security","HVAC & Refrigeration"],"lifecycle":[{"event":"open","at":"2026-11-06T20:57:43Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":34,"reasons":["conf:1","win:early","comp:brand"],"computed_at":"2026-11-07T03:46:08Z"},"pay":null,"html_url":"https://alion.io/job/copeland-security-engineer","json_url":"https://alion.io/job/copeland-security-engineer.json","meta":{"generated_at":"2026-11-07T03:46:08Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":9138,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-08T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1847558},"rest":"https://alion.io/mcp/rest/get_company?id=1847558"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fcopeland-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fcopeland-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fcopeland-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/copeland-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fcopeland-security-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3890091}},{"tool":"search_jobs","arguments":{"company":"copeland.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3890091},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}