Find & Apply For Cyber / Information Security Engineer / Analyst Jobs in Lake Forest, California

Senior Product Security Engineer WITS America, Corp. Lake Forest, CA Job Details Full-time $100,000 - $140,000 a year 20 hours ago Benefits Health insurance Paid time off Qualifications Application Integration Systems integration Engineering development testing Tooling Automation software Programming languages Continuous integration Vulnerability scanning Application security testing Full Job Description Overview We are seeking a Senior Product Security Engineer to strengthen our product security posture across the software development lifecycle. This role requires deep hands-on expertise with Black Duck (software composition analysis) and API-based integrations, along with strong working knowledge of one or more core security domains: memory leak/soak testing, mobile security, security patch management in R D environments, and cryptographic agility. The ideal candidate combines technical depth with the ability to embed security practices directly into engineering workflows.

Location:

Lake Forest, CA (Hybrid)/

Philadelphia, Employment Type:

Full-time W-2

Compensation:

Competitive, based on experience Company Description WITS (Wistron ITS) is a global IT services provider with 32+ years of experience and offices across the U.S. and Asia-Pacific. We partner with Fortune Global 500 companies to deliver scalable, high-quality software solutions across cloud, enterprise, and emerging technologies. At WITS, we focus on long-term projects, strong engineering culture, and real business impact. Key Responsibilities Own and drive Black Duck implementation, configuration, and ongoing management across development pipelines Build and maintain API-based integrations between Black Duck and CI/CD, ticketing, and reporting systems Triage, prioritize, and remediate open-source vulnerability and license risk findings surfaced through SCA scans Partner with R D and engineering teams to embed security testing (memory leak/soak testing, patching cadence, etc.) into development and release cycles Support cryptographic agility initiatives — assessing current cryptographic implementations and planning for algorithm/protocol transitions (e.g., post-quantum readiness, deprecating weak ciphers) Define and improve security patch management processes across product lines, balancing velocity with risk exposure Stay current on emerging vulnerabilities, CVEs, and industry security standards relevant to the product portfolio Required Qualifications 7+ years in product/application security, security engineering, or related technical security role Strong, demonstrable experience with Black Duck (or comparable SCA tools) including API-level interaction and automation Proficiency in at least one scripting/programming language (Python, Java, or similar) for API integration and tooling Working knowledge of one or more of the following: ◦ Memory leak / soak testing methodologies and tools ◦ Security patch management approaches in R D/product development environments ◦ Cryptographic agility concepts and implementation strategies Solid understanding of the software development lifecycle (SDLC) and how security integrates into CI/CD pipelines Strong communication skills — able to translate technical security findings for both engineering and non technical stakeholders

Pay:

$100,000.00 - $140,000.00 per year

Benefits:

Health insurance Paid time off Application Question(s): Do you have a Bachelor's degree or higher in Computer Science or Engineering?

Experience:

C/C++: 5 years (Required) C#/.

NET:

5 years (Required) Ability to

Commute:

Lake Forest, CA 92630 (Required)

Work Location:

Hybrid remote in Lake Forest, CA 92630