Role overview

Geotab is a global leader in IoT and connected transportation, processing billions of data points daily to help businesses manage fleets, improve driver safety, and optimize operations. As a Product Security Specialist, you will evaluate security across the company’s product portfolio, identifying vulnerabilities and working with development teams to integrate security practices throughout the product lifecycle.

Key responsibilities

Conduct security evaluations using source code, dynamic, and dependency scanners, along with manual code reviews and architectural assessments on internal and external products.
Trace source code across multiple programming languages and code bases to validate scanner findings and provide developer-level recommendations for remediation.
Write and maintain automation scripts using bash and python to generate scan packages, execute security scanners, and integrate them with CI pipelines and Google Cloud storage reporting systems.
Perform technical writing of security assessment reports and vulnerability descriptions for both product owners and developers, explaining risk assessments to technical and non-technical audiences.
Conduct security testing activities including vulnerability assessments, penetration testing, and threat modeling to identify potential security risks in products.
Collaborate with development teams and security operations to design secure architectures and ensure security-by-design principles are implemented throughout products.
Monitor emerging security threats, respond to vulnerability reports, contribute to secure coding standards development, and support initiatives to improve overall product security posture.

Requirements

Five to eight years of professional experience in security evaluation, security code reviews, or related development work.
Bachelor’s degree in Computer Science, Information Management, Engineering, or a related field, or equivalent combination of education and work experience.
Hands-on experience with source code, dynamic, and dependency scanning tools such as Veracode, Fortify, Sentinel, OWASP dependency checker, NetSparker, or Qualys.
Proficiency in programming languages including C, C#, .NET, Python, and JavaScript/TypeScript, along with knowledge of web service technologies such as XML, JSON, SOAP, and REST.
Competency with Linux, Windows, Google Compute Engine, Bash scripting, and Python.
Strong analytical and problem-solving skills with the ability to communicate complex security concepts clearly to diverse audiences and remain organized under changing priorities.

What makes this role worth considering

Geotab is certified as a Great Place to Work and offers a fast-paced, inclusive environment where you can innovate and reach your full potential. The role provides opportunities to make a direct impact on product security at a company processing massive scale data operations, while working with diverse teams across the globe on meaningful initiatives to advance transportation safety and sustainability.