Product Security Lead

🕒 September 22

🌐 Canada, United States – Remote

🇨🇦 Canada – Remote 🇺🇸 United States – Remote

💵 CA$163k - CA$198k / year

⏰ Full Time

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 2%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Miovision

WebsiteLinkedInAll Job Openings

201 - 500 employees

Founded 2005

🚗 Transport

🔧 Hardware

☁️ SaaS

💰 $26.2M Venture Round - Miovision on 2023-10

Transport • Hardware • SaaS

Miovision is a provider of intelligent transportation systems that combines hardware, software, and data services to optimize urban mobility and traffic operations. The company offers video detection and permanent data collection devices, managed connectivity, and signal control hardware alongside cloud and edge software products such as Miovision One, Signal Optimizer, DataLink, and a GenAI traffic engineering assistant (Mateo). Its solutions cover traffic data collection and studies, continuous safety monitoring, adaptive signal optimization, emergency vehicle preemption and transit signal priority, and V2X integrations aimed at improving safety, reducing congestion, and enabling more efficient and sustainable cities.

📋 Description

• Define, build, and lead Miovision’s Product Security function, including its vision, roadmap, and operating model • Advise the CISO, Product, and Engineering leadership • Embed security-by-design into the engineering lifecycle • Lead threat modeling, secure design reviews, and architectural risk assessments • Partner with Engineering to enforce secure coding and CI/CD pipeline security gates • Influence cloud and platform architecture through network segmentation, least-privilege access, resilience, and defense-in-depth strategies • Lead product-level risk identification and the vulnerability management lifecycle for product code, APIs, cloud services, and embedded components • Oversee penetration testing and remediation tracking • Partner with GRC, Sales, and RevOps on RFPs, RFIs, and customer security reviews • Serve as a technical authority in customer-facing discussions • Translate ISO 27001, SOC 2, NIST, and Tx-RAMP requirements into product-level security controls • Collaborate with Security Operations and Cloud Ops on product telemetry, logging, secure-by-default deployment patterns, and incident-response integration

🎯 Requirements

• Extensive technical experience in application security, product security, secure engineering, or cloud security, ideally within SaaS or critical-infrastructure environments • Hands-on experience applying Secure Software Development Lifecycle practices • Experience with SAST/DAST integration, threat modeling, and automated security gates in modern CI/CD pipelines • Experience mapping controls to ISO 27001, SOC 2, NIST CSF / 800-53 • Working knowledge of NIST SP 800-82 (OT/ICS Security) • Proven track record securing connected devices, IoT, or OT-adjacent systems • Strong expertise in cloud-native architectures, AWS preferred, APIs, and microservices • Ability to influence senior engineers and product leaders without direct authority • Ability to translate technical risks for auditors, executives, and non-technical stakeholders • Analytical mindset and exceptional critical-thinking skills • Practical experience using the OWASP security tool suite and CISA Cyber Security Evaluation Tool (CSET)

🏖️ Benefits

• Comprehensive health benefits • 24/7 virtual healthcare access • Dedicated wellness programs • RRSP/401K Matching Plan • Variable Incentive Plan • Unique Mio-Days • Flexible vacation policy • Flexible work options • Internet subsidy • Remote work allowance • Enhanced leave for new parents • Equity • Bonus