The software development teams within Motorola Solutions are pushing quicky into new frontiers including: DevOps, Web-Scale SaaS / Cloud, WebApps, Native Mobile Apps, browser apps (Angular, React), APIs and Microservices. The mission assigned to this job will be to drive an appsec program across all of these, working with appsec teams embedded within each, to create a holistic appsec program across the entire company. As the appsec lead for the company, you will be tasked with coming in with your experience, and your ideas, and shaping the future of appsec for public safety software.
To be successful in this role, the candidate must have experience with the following:
Strong understanding of SDLC
Strong knowledge of OWASP documentation and tools
Experience building out an appsec program in former positions
Experience with deploying OWASP tools or equivalent commercially available tools
Experience with pre-commit appsec activities such as threat modeling / attack mapping, security and privacy stories, IDE security plugins, pre-commit security hooks, and secure coding standards
Experience guiding developers around security unit tests
Experience with software composition analysis / dependency management and automating inventory collection of libraries
Experience integrating appsec into CI/CD environments, including SAST and DAST
Experience with ensuring that security adds value to developers, not just friction
Experience with providing meaningful measurements and metrics such that success of the application security program can be measured over time.
When we create our software, public safety agencies and first responders are our customers. But when something goes south in our lives an we make that 911 call, we quickly become the customer of our customer. This is an opportunity to drive an appsec program and make a difference for software applications and services that quite literally affect the well being of lives on an everyday basis.
Must be highly collaborative
Highest level of integrity in dealing with confidential and sensitive information
Strong written and verbal communication skills
Proactive approach and enthusiasm for problem identification and solving
Flexible and able to adapt to changing priorities
A strong appetitive for continuous learning