Apply on Employer Site

Toyota North America · 1 day ago

Principal Engineer - Application Security (Pentesting)

Plano, TX

Full-time

Onsite

Senior Level, Lead/Staff

5+ years exp

Toyota North America is a leading global company in the mobility space, focused on innovative solutions and cybersecurity. They are seeking a Principal Engineer for Application Security who will be responsible for conducting penetration tests and enhancing the security posture of Toyota's information systems.

Manufacturing

Comp. & Benefits

No H1B

Responsibilities

Plan, coordinate, and execute application security assessments to identify vulnerabilities, control gaps, and potential attack vectors in Toyota's information systems

Collaborate with application teams and other cybersecurity teams to ensure effective and comprehensive engagements

Work closely with the application teams to share insights and knowledge from penetration tests to improve overall security posture

Analyze and prioritize findings from application security assessments, making data-driven recommendations to enhance the security of Toyota's systems

Produce high-quality reports detailing the results of exercises, including vulnerabilities, risks, and proposed mitigations, and highlighting larger thematic improvement opportunities

Provide guidance and support for the implementation of recommended security controls and improvements

Stay current with emerging threats, trends, and best practices in the cybersecurity landscape to ensure that Toyota's defenses remain effective and up-to-date

Foster a culture of continuous learning and improvement within the cybersecurity team

Qualification

Penetration testingSecurity principlesVulnerability assessmentCommon penetration toolsNetwork protocolsCloud environmentsAnalytical skillsRelevant certificationsProblem-solving skillsCommunication skillsTeam collaborationContinuous learning

Required

5+ years of experience in cybersecurity, with a focus on penetration testing activities

Strong understanding of security principles, attack methodologies, and vulnerability assessment techniques

Experience with common penetration tooling platforms, such as Kali, etc

Deep knowledge of common network protocols, operating systems, security tools, and how to exploit/circumvent them

Excellent analytical, problem-solving, and decision-making skills

Bachelor's degree in Computer Science or related discipline, or equivalent work experience

Preferred

Experience with application development and implementing or developing mitigating controls in a large environment

Exploitation experience with Active Directory / Azure Active Directory, containerization platforms (Docker, Kubernetes, etc.), and major cloud environments (AWS, Azure, GCP, etc.)

Knowledge of industry-standard frameworks and best practices (e.g., NIST, ISO, OWASP)

Master's degree in Computer Science or related discipline

Strong written and verbal communication skills, with the ability to effectively convey technical information to both technical and non-technical stakeholders

Relevant certifications (e.g., OSCP, OSCE, CISSP) are highly desirable