{"id":1672959,"url":"https://alion.io/job/generac-senior-director-product-security","title":"Senior Director Product Security","company":{"id":58587,"name":"Generac","domain":"generac.com","url":"https://alion.io/company/generac","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":80,"open_postings":58,"ghost_share":0,"stale_share":0.793,"repost_share":0,"time_to_fill_p50_days":43,"computed_at":"2026-10-15T05:46:00Z"}},"role":"Leadership","role_family":"Leadership","seniority":"head","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Waukesha, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":156000,"max_usd":292000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":2407},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Threat Modeling","optional":false}],"status":"live","first_seen_at":"2026-09-01T00:00:00Z","employer_posted_date":"2026-09-01","last_verified_at":"2026-10-15T07:38:47Z","board_verified":true,"closed_at":null,"days_open":44,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":44},"description":"We believe power is a promise - a shared commitment to be there for others when it matters most.\nFor more than 65 years, we've turned big ideas into solutions that help protect homes, strengthen businesses and build a more resilient, efficient, sustainable energy future.\nReady to Power a Smarter World with us?\nGenerac is seeking a forward-thinking Senior Director, Product Security to lead and advance our enterprise-wide product security strategy across a rapidly expanding portfolio of connected products, energy technologies, software, and digital services. This highly visible leadership role is responsible for ensuring security is embedded into every stage of the product lifecycle, enabling our teams to deliver innovative solutions that are secure by design and trusted by customers around the world.\nAs the company’s foremost product security leader, you will define the frameworks, governance, and security standards that shape how we design, develop, deploy, and support connected technologies. Leveraging IEC 62443 as the foundation of our product security program, you will lead the evolution of our secure development lifecycle, drive enterprise-wide adoption of secure engineering practices, and establish best-in-class Product Security Incident Response capabilities that safeguard customers and products in the field.\nThis role will play a pivotal part in navigating an increasingly complex global regulatory environment, including the EU Cyber Resilience Act, UK Product Security requirements, and emerging international standards. You will translate evolving cybersecurity regulations into practical engineering processes that position Generac ahead of compliance requirements while strengthening customer trust and market differentiation.\nAs a strategic enterprise leader, the Senior Director will partner closely with Engineering, Information Security, Legal, Quality, Product Management, and Business Leadership to build a world-class product security organization and culture. This leader will regularly engage with executive leadership, board members, customers, auditors, and regulatory agencies, serving as a trusted advisor on product security strategy, risk management, and secure innovation.\nThis is a unique opportunity to influence how a global technology and energy solutions company designs, builds, and delivers its products while transforming product security into a sustainable competitive advantage for the future.\nWhy Join Generac?\nAt Generac, you'll have the opportunity to shape the security strategy for a growing portfolio of connected energy solutions that power homes, businesses, and communities worldwide. Your leadership will directly influence product innovation, customer trust, regulatory readiness, and the future of secure energy technology.\nMAJOR RESPONSIBILITIES:\nProduct Security Strategy:\nSet the enterprise product security strategy and multi year roadmap, and embed secure by design as the standard across the product portfolio and the energy technology solutions and services that extend it.\n\nEstablish IEC 62443 as the primary product security framework, and define how its requirements apply across industrial, commercial, and consumer connected products.\n\nMake product security a visible driver of customer trust and competitive differentiation, and represent it to customers, partners, auditors, and regulators.\n\nPartner with engineering and product leadership so security requirements, threat models, and risk decisions are built into product design, development, and release. Secure Development Lifecycle · Define and operationalize the secure development lifecycle that engineering teams build to, including threat modeling, secure coding, security testing, and security gates within the development process.\n\nLead the company toward formal certification of its secure development lifecycle against IEC 62443-4-1, advancing process maturity to the required level and preparing the organization for assessment by an accredited body. · Establish the foundations that position products and components for downstream certification, including IEC 62443-4-2 for components and IEC 62443-3-3 for systems.\n\nDrive software bill of materials, secure software supply chain, and vulnerability management practices into the development lifecycle.\n\nProduct Security Incident Response:\nBuild and lead the Product Security Incident Response capability that receives, triages, investigates, and resolves vulnerabilities and incidents affecting products in the field.\n\nEstablish coordinated vulnerability disclosure and handling practices aligned to ISO/IEC 29147 and ISO/IEC 30111, including a public intake channel and clear security advisories for customers.\n\nStand up the processes and reporting needed to meet regulatory timelines, including the EU Cyber Resilience Act obligation to report actively exploited vulnerabilities and severe incidents on a 24 hour, 72 hour, and final report cadence.\n\nPartner with enterprise security operations and incident response so product and enterprise incidents are handled as one coordinated response.\n\nGlobal Regulatory and Compliance Leadership\n\nLead the company's product security response to a fast moving global regulatory landscape, including the EU Cyber Resilience Act, the UK product security regime, and emerging product security regulations in other markets.\n\nTranslate new and emerging obligations into engineering requirements, evidence, and documentation, including conformity assessment, CE marking support, and declarations of conformity where required.\n\nMaintain product security policies, standards, and control narratives, and own the evidence that demonstrates compliance to auditors, customers, and market surveillance authorities.\n\nTrack the regulatory horizon and advise executive leadership on the cost, risk, and timing of new requirements.\n\nOrganization and Talent\n\nBuild, staff, and develop a high performing product security organization, including managers and senior engineers, and establish product security as a respected discipline across the company.\n\nSet clear direction, develop talent, and create a culture of ownership, engineering rigor, and customer focus.\n\nInfluence teams well beyond direct reports, embedding product security champions and practices within the engineering organizations of each business unit.\n\nManage product security tooling, services, and external partners, and steer investment toward the highest risk\n\nreduction.\n\nMinimum Job Requirements:\nEducation:\nBachelor degree in Engineering, Computer Science, Cybersecurity, or related field. Equivalent experience considered.\n\nCertification / License\nOne or more of the following is strongly preferred: CISSP, CSSLP, GICSP, ISA or IEC 62443 certifications, or equivalent product and application security credentials.\n\nWork Experience\n\n12 years in cybersecurity, product security, or secure engineering, with progressive leadership responsibility. · 7 years leading teams, including leading other managers or senior engineers, ideally across multiple regions.\n\nProven record building or substantially maturing a product security program for connected, embedded, or industrial products.\n\nHands on leadership of a secure development lifecycle and a product security incident response capability.\n\nWorking experience applying IEC 62443 to real products, including familiarity with the path to IEC 62443-4-1 certification.\n\nExperience navigating global product security regulations such as the EU Cyber Resilience Act or comparable regimes.\n\nPreferred Job Requirements\nEducation:\nAdvanced degree in Engineering, Cybersecurity, or Computer Science\n\nCertification / License\n\nAdditional ISA or IEC 62443, cloud, or product security certifications.\n\nWork Experience\nExperience achieving or maintaining IEC 62443-4-1 certification of a secure development lifecycle. · Experience in energy, power, industrial, or connected consumer product environments.\n\nExperience securing products that span operational technology, embedded systems, cloud connected services, and mobile applications.\n\nExperience aligning product security with enterprise security, including shared incident response and governance.\n\nKnowledge / Skills / Abilities\nDeep knowledge of secure by design, the secure development lifecycle, threat modeling, and product vulnerability management.\n\nStrong command of IEC 62443, including the secure development lifecycle requirements of 62443-4-1 and the component and system requirements of 62443-4-2 and 62443-3-3.\n\nWorking knowledge of the global product security regulatory landscape, including the EU Cyber Resilience Act, the UK product security regime, and comparable emerging regimes in other markets.\n\nPractical understanding of product security incident response and coordinated vulnerability disclosure aligned to ISO/IEC 29147 and ISO/IEC 30111.\n\nAbility to set enterprise strategy and translate it into engineering practice, evidence, and certification outcomes.\n\nExcellent executive communication and influence, with the ability to represent product security to the board, customers, auditors, and regulators.\n\nDemonstrated ability to build, develop, and retain a world class technical organization.\n\n“We are an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, national origin, disability status, protected veteran status, or any other characteristic protected by law.”","description_format":"text","description_chars":9497,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Technology","Manufacturing","Application Security"],"lifecycle":[{"event":"open","at":"2026-10-02T07:29:25Z"}],"visa":[],"liveness":{"score":25,"band":"fade","label":"Fading","p_open":1,"p_active":0.559,"p_room":0.44,"age_days":44,"expected_fill_days":43,"reasons":["conf:3","stale_co","velocity","win:tail","crowd:brand"],"computed_at":"2026-10-15T05:46:00Z"},"pay":null,"html_url":"https://alion.io/job/generac-senior-director-product-security","json_url":"https://alion.io/job/generac-senior-director-product-security.json","meta":{"generated_at":"2026-10-15T08:59:24Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":13699,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-16T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":58587},"rest":"https://alion.io/mcp/rest/get_company?id=58587"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fgenerac-senior-director-product-security"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fgenerac-senior-director-product-security"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fgenerac-senior-director-product-security"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/generac-senior-director-product-security\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fgenerac-senior-director-product-security"}]}