{"id":3479350,"url":"https://alion.io/job/smart-technologies-product-security-lead","title":"Product Security Lead","company":{"id":1782968,"name":"SMART Technologies","domain":"smarttech.com","url":"https://alion.io/company/smarttech-com","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Dayforce","truth_index":null},"role":"Security","role_family":"Security","seniority":"lead","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Calgary, Canada"],"countries":["CA"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":80000,"max_usd":156000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":19},"experience_years_min":8,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"ISO 27001","optional":false},{"name":"NIST CSF","optional":false},{"name":"SBOM","optional":false},{"name":"SOC 2","optional":false},{"name":"Threat Modeling","optional":false}],"status":"live","first_seen_at":"2026-10-29T09:00:00Z","employer_posted_date":"2026-10-29","last_verified_at":"2026-11-03T07:20:01Z","board_verified":true,"closed_at":null,"days_open":5,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":5},"description":"About the Role \nAt SMART Technologies, security is a critical component of how we design, build, and support our products. The Product Security Lead serves as SMART's subject matter expert for product cybersecurity and Secure Software Development Lifecycle (SSDLC) practices. Working across desktop and embedded software, cloud, and connected products, this role partners with Engineering, Product Management, Legal, Information Systems, Quality, and external stakeholders to help ensure SMART products meet evolving customer, security, and regulatory expectations. \nRole Summary \nThe Product Security Lead provides technical leadership and subject matter expertise in secure software development, product security, vulnerability management, security architecture, and cybersecurity governance across SMART's product portfolio. \nThis is a hands-on role that combines product security expertise, technical leadership, and practical experience across cloud, web, desktop, embedded Android, and connected-device products. The role works with product teams, engineering leaders, suppliers, and external partners to translate security requirements into practical engineering processes, technical controls, and development practices. \nAs a trusted advisor to technical and business stakeholders, the Product Security Lead helps shape product security strategy, guide risk-based decision-making, support regulatory readiness, and represent SMART on product cybersecurity matters with customers, partners, and certification bodies \nWhat You'll Do \nSecure Software Development Lifecycle \nDrive continuous improvement of SMART's Secure Software Development Lifecycle (SSDLC). \nEmbed security requirements into product design, architecture, implementation, testing, and release processes. \nFacilitate threat modeling, secure architecture reviews, and risk assessments. \nChampion security-by-design principles across product teams. \nProduct Security Engineering & Architecture \nProvide guidance on product architecture, secure design, and security controls. \nChampion security tooling including SAST, DAST, software composition analysis, dependency scanning, and related practices. \nEstablish and maintain security requirements, standards, and governance practices. \nSupport Software Bill of Materials (SBOM) governance and software supply-chain security initiatives. \nReview designs, implementations, incidents, and security findings across cloud, web, desktop, embedded, and connected-device products. \nVulnerability Management \nEstablish and maintain product vulnerability management processes. \nReview and prioritize vulnerability disclosures, CVEs, penetration test findings, supplier advisories, and security assessments. \nCoordinate remediation activities across engineering teams. \nDevelop risk-based prioritization frameworks and remediation guidance. \nSupport product security incident readiness and response activities. \nProduct Security Strategy and Governance \nShape and maintain SMART's product security strategy. \nAssess emerging cybersecurity threats and identify impacts to SMART products and services. \nPartner with Engineering and Product Management to prioritize security investments and risk-reduction initiatives. \nDefine and report product security metrics, risks, and recommendations. \nRegulatory Readiness \nMonitor relevant cybersecurity regulations, standards, and frameworks. \nTranslate applicable security and regulatory requirements into engineering practices and controls. \nConduct gap assessments and recommend remediation plans. \nSupport audit, certification, and compliance-readiness activities. \nPartner with Legal, Quality, Product Management, and Engineering on regulatory initiatives. \nExternal Coordination \nCoordinate with external security assessors, penetration testing firms, test laboratories, and certification bodies. \nSupport product security assessments, audits, certification activities, and remediation follow-up. \nCollaborate with suppliers and technology partners to review security evidence and communicate SMART's security expectations. \nIdentify and communicate risks related to third-party software, services, and supply-chain dependencies. \nCustomer and Business Support \nAct as a subject matter expert for product cybersecurity. \nSupport customer security reviews, security questionnaires, whitepapers, bid responses, and procurement activities. \nProvide cybersecurity guidance to Product, Engineering, Sales, Customer Success, Legal, and Executive Leadership. \nRepresent SMART in discussions with customers, partners, auditors, assessors, and external stakeholders. \nQualifications \nRequired \n8+ years of experience in software engineering, application security, product security, or a related cybersecurity discipline. \nExperience implementing or operating Secure Software Development Lifecycle (SSDLC) programs. \nExperience with threat modeling, vulnerability management, secure architecture reviews, and secure development practices. \nStrong understanding of cloud-connected software products, APIs, authentication systems, and software supply chains. \nProven ability to influence senior leaders and executives, as well as engineering teams, without direct authority, building trust and shaping decisions on security priorities, investments, and risk acceptance. \nExcellent written and verbal communication skills, with experience presenting clear, concise recommendations to executive and non-technical audiences. \nAbility to translate technical security risks into business terms, such as revenue, market access, customer trust, and regulatory exposure, to support executive decision-making. \nPreferred \nExperience with product cybersecurity regulations and frameworks including CRA, RED, NIST CSF, NIST Secure Software Development Framework (SSDF), IEC 62443, ISO 27001, SOC 2, or similar standards. \nExperience supporting customer security reviews, audits, or compliance assessments. \nExperience with regulated, embedded (Android), SaaS, cloud, AI-enabled, or connected-device products. \nSecurity certifications such as CISSP, CSSLP, GSEC, GIAC, or equivalent. \nExperience with modern security tooling, including SAST, DAST, software composition analysis, dependency scanning, and related technologies. \nExperience advising executive leadership or board-level stakeholders on cybersecurity, product risk, or regulatory matters.","description_format":"text","description_chars":6380,"description_truncated":false,"requirements":{"experience_years_min":8,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Pro AV & Digital Signage","Information Security","Team Communication & Collaboration"],"lifecycle":[{"event":"open","at":"2026-10-29T19:44:35Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":4,"expected_fill_days":30,"reasons":["conf:3","win:early"],"computed_at":"2026-11-03T05:54:40Z"},"pay":null,"html_url":"https://alion.io/job/smart-technologies-product-security-lead","json_url":"https://alion.io/job/smart-technologies-product-security-lead.json","meta":{"generated_at":"2026-11-03T11:30:43Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":15693,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-04T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1782968},"rest":"https://alion.io/mcp/rest/get_company?id=1782968"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fsmart-technologies-product-security-lead"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fsmart-technologies-product-security-lead"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fsmart-technologies-product-security-lead"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/smart-technologies-product-security-lead\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fsmart-technologies-product-security-lead"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3479350}},{"tool":"search_jobs","arguments":{"company":"smarttech.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3479350},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}