{"id":2742552,"url":"https://alion.io/job/elotouch-security-engineer","title":"Security Engineer","company":{"id":2297464,"name":"elotouch","domain":"elotouch.com.cn","url":"https://alion.io/company/elotouch-com-cn","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"ADP","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Milpitas, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":130400,"max":179000,"currency":"USD","period":"year","gross":null,"usd_annual":179000},"salary_estimate":null,"experience_years_min":8,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"C++","optional":false},{"name":"CI/CD","optional":false},{"name":"CVE","optional":false},{"name":"CVSS","optional":false},{"name":"Docker","optional":false},{"name":"IAM","optional":false},{"name":"Java","optional":false},{"name":"Kotlin","optional":false},{"name":"Kubernetes","optional":false},{"name":"Least Privilege","optional":false},{"name":"OWASP","optional":false},{"name":"PKI","optional":false},{"name":"Platform Engineering","optional":false},{"name":"Python","optional":false},{"name":"Threat Modeling","optional":false},{"name":"Checkmarx","optional":true},{"name":"Fortify","optional":true},{"name":"GitHub","optional":true},{"name":"Mend","optional":true},{"name":"OWASP Dependency-Track","optional":true},{"name":"OWASP SAMM","optional":true},{"name":"OWASP Top 10","optional":true},{"name":"SBOM","optional":true},{"name":"Snyk","optional":true},{"name":"SonarQube","optional":true}],"status":"live","first_seen_at":"2026-09-23T17:18:00Z","employer_posted_date":"2026-09-23","last_verified_at":"2026-10-17T01:55:01Z","board_verified":true,"closed_at":null,"days_open":23,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":23},"description":"We know touch - it's our only business. In fact, we invented the touchscreen over 50 years ago and haven't stopped since. Every 21 seconds, a new Elo touch screen is installed somewhere in the world. We obsess over details to exceed the highest quality standards. We don’t just sell things. We offer solutions to tomorrow’s challenges.\nJob Purpose & Responsibilities:\nElo is seeking an experienced Security Engineer to serve as a senior technical security leader within Software Engineering. This is a hands-on individual contributor role responsible for strengthening the security posture of Elo's Android devices, AWS cloud services, payment products, software development environments, and software supply chain.\nYou will define and execute security engineering strategy, establish technical controls and standards, drive vulnerability remediation, and partner closely with Software Engineering, Product Security, Enterprise Security, IT, Product Management, Quality, Compliance, and external partners.\nThe ideal candidate combines strong hands-on security engineering expertise with the ability to influence across teams and drive measurable security outcomes.\nKey Responsibilities\nDefine and execute the Software Engineering security strategy, roadmap, standards, and measurable objectives.\nIntegrate and operate SAST, SCA, secrets detection, IaC scanning, and security gates within CI/CD pipelines.\nDrive software supply chain security, including dependency risk management, SBOMs, package governance, and AI-assisted development risks.\nEstablish code signing and artifact integrity across Android applications, firmware, BSP images, containers, payment applications, and release artifacts.\nStrengthen AWS cloud security, including IAM, least privilege, MFA, encryption, network controls, logging, WAF, and security guardrails.\nImprove container security, including hardened base images, vulnerability management, registry controls, and lifecycle management.\nLead Android/AOSP security activities, including CVE remediation, SELinux, Verified Boot, keystore/key attestation, and platform hardening.\nOwn vulnerability management across device, cloud, and payment environments, including prioritization, remediation SLAs, and validation.\nLead threat modeling, secure design reviews, penetration-test remediation, and security assessments.\nSupport security requirements related to PCI, EU RED/EN 18031, EU CRA, ETSI EN 303 645, NIST, and OWASP.\nDevelop security metrics and provide technical reporting on vulnerabilities, remediation, control coverage, exceptions, and security risk.\nServe as a technical escalation point for release-blocking security findings and certification concerns.\nRepresent Software Engineering in security governance, audits, customer security discussions, and third-party assessments.\nProvide security guidance, secure coding support, and technical coaching to engineering teams.\nMinimum Qualifications\nBachelor’s degree in computer science, Computer Engineering, Information Security, or a related technical field.\n8+ years of experience in security engineering, software engineering, platform engineering, product security, or a related field.\nHands-on experience integrating SAST/SCA and security tooling into CI/CD pipelines and driving remediation with development teams.\nStrong working knowledge of AWS security, including IAM, networking, encryption, logging, and cloud security posture management.\nPractical experience with Docker, Kubernetes, and container security.\nAbility to read and review code in at least two languages such as Java, Kotlin, C/C++, Python, Go, or Shell.\nWorking knowledge of CVE/CVSS, vulnerability management, threat modeling, and secure software development.\nUnderstanding of cryptography, PKI, TLS, certificates, and key management.\nDemonstrated ability to influence and drive security outcomes across teams without direct authority.\nPreferred Qualifications\nExperience implementing code signing across firmware, mobile, and container artifacts.\nAndroid/AOSP security experience, including SELinux, Verified Boot, keystore, BSP, or platform security.\nExperience with SBOM and software supply chain security, including SPDX/CycloneDX and tools such as JFrog Curation or Dependency-Track.\nExperience with security platforms such as Cycode, SonarQube, Fortify, Checkmarx, GitHub Advanced Security, Black Duck, Snyk, or Mend.\nExperience with hardened container images such as Chainguard.\nKnowledge of PCI-SSF, PCI-PTS, EU CRA, EU RED/EN 18031, ETSI EN 303 645, or IEC 62443.\nFamiliarity with OWASP Top 10, OWASP Mobile Top 10, OWASP SAMM, and NIST secure development practices.\nSecurity certifications such as CISSP, CSSLP, OSCP, GIAC, or AWS Security Specialty.\nExperience working within an enterprise security governance model where enterprise teams establish security guardrails and business units drive implementation.\nWhat Success Looks Like\nIn this role, you will help Elo move from reactive security remediation toward measurable, repeatable, engineering-driven security practices. Success includes stronger security controls, reduced vulnerability exposure, secure development pipelines, improved cloud and device security, reliable software supply chain controls, and demonstrable compliance with customer and regulatory requirements.\nPhysical Demands\nAbility to lift up to OSHA single person lift requirements\nAbility to sit, stand, bend, or walk for prolonged periods of time\nAbility to travel domestically and internationally\nMust be able to work a standard full-time schedule\nMust be able to work a hybrid schedule, in the Milpitas office on Tuesdays and Wednesdays\nElo Touch Solutions provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, sex, national origin, age, disability or genetics. In addition to federal law requirements, Elo Touch Solutions complies with applicable state and local laws governing nondiscrimination in employment in every location in which the company has facilities. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training.\nElo Touch Solutions expressly prohibits any form of workplace harassment based on race, color, religion, gender, sexual orientation, gender identity or expression, national origin, age, genetic information, disability, or veteran status. Improper interference with the ability of Elo Touch Solutions employees to perform their job duties may result in discipline up to and including discharge.\nElo Touch Solutions offers a competitive total compensation package. Benefits include Health, Dental, Vision, Life Insurance, Paid Vacation, 401K, Long and Short-Term Disability, and Tuition Reimbursement. Starting compensation for this role typically ranges between $130,400.00 and $179,000.00 annually is commensurate with experience relative to the position and may vary based on candidate geographical location.","description_format":"text","description_chars":7057,"description_truncated":false,"requirements":{"experience_years_min":8,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["401k plan","Life insurance"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Professional Services"],"lifecycle":[{"event":"open","at":"2026-10-16T21:18:58Z"}],"visa":[],"liveness":{"score":51,"band":"ok","label":"Likely open","p_open":1,"p_active":0.678,"p_room":0.75,"age_days":23,"expected_fill_days":24,"reasons":["conf:3","win:late"],"computed_at":"2026-10-17T05:15:45Z"},"pay":{"stated_usd_annual":179000,"is_top_pay":true},"html_url":"https://alion.io/job/elotouch-security-engineer","json_url":"https://alion.io/job/elotouch-security-engineer.json","meta":{"generated_at":"2026-10-17T05:15:45Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":7024,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-18T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2297464},"rest":"https://alion.io/mcp/rest/get_company?id=2297464"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Felotouch-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Felotouch-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Felotouch-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/elotouch-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Felotouch-security-engineer"}]}