On any given day, every moment matters to someone, somewhere. And every moment, Motorola Solutions innovations, products and services play essential roles in peoples lives. We help firefighters see around buildings and police officers see around street corners. We keep utility workers connected and visible to each other with real-time voice and data communication across the smart grid. And we provide the situational awareness first responders need when a moment brings catastrophe. We help people be their best in their moments that matter.
The Products & Services Organization within Motorola Solutions is responsible for development of the companys mission critical communications and mission critical intelligence portfolio, including command center applications, Land Mobile Radio (LMR) and LTE solutions, as well as managed and support services around the world. The organization also includes the companys procurement and supply chain operations.
The Products & Services (P&S) Security Architecture team is responsible for the securityarchitecture of Motorola Solutions Products and Services such as Cloud security, APIs / Microservices, mobilesecurity and application security.
The software development teams within Motorola Solutions are pushing quicky into new frontiers including: DevOps, Web-Scale SaaS / Cloud, WebApps, Native Mobile Apps, browser apps (Angular, React), APIs and Microservices. The mission assigned to this job will be to drive an appsec program across all of these, working with appsec teams embedded within each, to create a holistic appsec program across the entire company. As the appsec lead for the company, you will be tasked with coming in with your experience, and your ideas, and shaping the future of appsec for public safety software.
To be successful in this role, the candidate must have experience with the following:
Strong understanding of SDLC Strong knowledge of OWASP documentation and tools Experience building out an appsec program in former positions Experience with deploying OWASP tools or equivalent commercially available tools Experience with pre-commit appsec activities such as threat modeling / attack mapping, security and privacy stories, IDE security plugins, pre-commit security hooks, and secure coding standards Experience guiding developers around security unit tests Experience with software composition analysis / dependency management and automating inventory collection of libraries Experience integrating appsec into CI/CD environments, including SAST and DAST Experience with ensuring that security adds value to developers, not just friction Experience with providing meaningful measurements and metrics such that success of the application security program can be measured over time.
When we create our software, public safety agencies and first responders are our customers. But when something goes south in our lives an we make that 911 call, we quickly become the customer of our customer. This is an opportunity to drive an appsec program and make a difference for software applications and services that quite literally affect the well being of lives on an everyday basis.
Must be highly collaborative Highest level of integrity in dealing with confidential and sensitive information Strong written and verbal communication skills Proactive approach and enthusiasm for problem identification and solving Flexible and able to adapt to changing priorities A strong appetitive for continuous learning
Bachelor's Degree in Computer Science or a related field, with a Masters Degree preferred 5 or more years Security experience