Leveraging our knowledge from companies like apple, bcg, and ideo, we’ve rethought how people interact with spaceLatch delivers a full-building operating system designed to help owners, residents, and third parties like guests, couriers, and service providers, seamlessly experience the modern buildingWe’ve done this by combining software, devices, and services into a holistic platform that makes spaces more efficient, enjoyable, and profitable.
The next chapter of the latch story will be our most exciting yet, and we’re looking for more talented team members to help fuel our growth.
This position will be primarily responsible for the development and management of product security requirements, architecture, design, testing, and appropriate documentation as guided by latch product standardsThey will work closely with development teams to build in security throughout the product life cycle and to test and verify the implemented controls.
They will interface with the information security team and application leaders to provide threat models, assessments, reporting, guidance, and assistance with remediation where applicable.
Responsibilities:
Product security architecture, design, and engineering requirements and processes
Embedded device security testing and review
New product development security needs
Product security parameters, features, and configuration policies
Product security testing (internal and external)
Bounty program bug report confirmation and triage /w remediation guidance
Retesting/fix confirmation and approval
Application security
Code review / coding best practices
Vrm process for libraries and third party code approval
Development specific security training
Product pki infrastructure design and key management processes
Manufacturing security / manufacturing security design
Security aspects of product provisioning and configuration process
Product incident response
Product security monitoring
Development environment security
Jenkins/bamboo/github/bitbucket specific security concerns
Qualifications:
7 to 10+ years experience
Bachelor`s degree in information security, computer science, information systems management, or related field from a 4 year college or university or demonstrated equivalent experience
Minimum of 3 years of embedded device security engineering or related experience, or an equivalent combination of experience with embedded systems or iot security, web or mobile security, secure software development, cryptography, network security, or penetration testing
Experience with public key cryptography architectures and management of x509 certificate based hierarchies, particularly through the use of hardware secure elements or hardware security modules
And understanding of network, web, and wireless protocols (such as tcp/ip, ssl/tls, 802.11a-g, zigbee, zwave, nfc)
Experience with some if not all of the following technologies:
Embedded c
Python
Aws iot (mqtt)
Founded in 2014, latch now has 300+ team members working to make spaces better places to live, work, and visitOver half of our team members work in product development roles, and our team leverages established expertise in over 55 professional disciplines.
We offer unlimited paid time off, a comprehensive benefits package, mental health support, and an environment where employees are surrounded by creative, empowered, and dynamic peers.
In conjunction with our core values: contagious determination, humility, trust, inclusion, action with intent, and privacy, we approach our work with care and a sense of duty, to make the world a better space.
We embrace diversity and strive to create an inclusive and equitable environment for all.
