At Motorola Solutions, we believe that everything starts with our people. We’re a global close-knit community, united by the relentless pursuit to help keep people safer everywhere. We build and connect technologies to help protect people, property and places.

Our solutions foster the collaboration that’s critical for safer communities, safer schools, safer hospitals, safer businesses, and ultimately, safer nations. Connect with a career that matters, and help us build a safer future. Nous sommes une communauté mondiale soudée, unie par la volonté incessante de contribuer à la sécurité des personnes partout dans le monde.

Nous concevons et connectons des technologies qui contribuent à protéger les personnes, les biens et les infrastructures. Nos solutions favorisent la collaboration essentielle pour améliorer la sécurité des populations, des écoles, des hôpitaux, des entreprises et, finalement, des nations. The Avigilon security team, which you will be a key member of, is responsible for maintaining and implementing security controls for all confidential and intellectual property data across our physical security and video security platform, within the Avigilon organization.

This Senior Software Security

Engineer will be responsible for analyzing software designs and implementations from a security perspective, identifying and proposing remediations to security issues throughout the software development lifecycle (SDLC).

Security

Design and Implementation Perform threat modeling, risk assessments, and architecture reviews to identify and mitigate risk. Support the engineering teams on detailed security requirements to meet compliance requirements and industry best practices. Perform security code reviews looking for potential security vulnerabilities. Act as a subject matter expert to advise and answer questions from engineering and compliance teams on technical product security matters.

Security Testing

Define and oversee the deployment of Software Composition Analysis (SCA) tools to compile SBOMs of software components, helping to identify known vulnerabilities and license compliance violations. Define and oversee the deployment of automated security testing tools into CI pipelines, including Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), and Secret Detection scanning tools. Manual penetration testing of web applications (backend and frontend).

Manual penetration testing skills in the domains of cloud infrastructure, embedded/OS or mobile are desirable. Write custom scripts or unit test cases to check for vulnerabilities or broken/missing security controls. Recommend improvements to existing security scanning tools and processes, and propose new ones.

Triage the findings from the automated security scanning tools. Validate potential security vulnerabilities to determine whether they are actual true positives,



or false positives (i.e. non-applicable) in the product context. Assess the risk of vulnerabilities and threats in order to help the business determine their remediation priority order.

Communicate the identified security issues to engineering and compliance stakeholders, and manage them throughout the SDLC process to ensure they are properly addressed. Establish and maintain secure coding standards, baseline product security requirements and more general best practices to provide guidance to development teams. Assist the program area with implementing a secure Continuous Integration/Continuous Delivery (CI/CD) pipeline utilizing DevSecOps principles and practices to increase automation.

Implement automated security controls as part of CI/CD pipelines. Support product security incident response processes, including root cause analysis (identify the affected product components, data, and the overall impact level) and definition of mitigation strategies. Define explicit criteria and protocols for security incident response.

Conduct post-incident analysis to compile lists of lessons learned, and measures to prevent similar incidents from reoccurring, and refine response strategies. Monitor emerging security threats, vulnerabilities, and trends to proactively investigate, remediate, and integrate new protections. Ensure products comply with relevant security standards, certifications, and regulations (e.g., 7+ years of experience in Security Engineering with a focus on product security and/or application security. ~ Bachelor’s degree in Computer Science, Information Security, or a related technical field.

Technical Skills

In-depth knowledge of Linux and Docker container-based infrastructures, including their orchestration (e.g. Working knowledge of techniques, standards, and state-of-the-art authentication and authorization technologies, applied cryptography, security vulnerabilities and remediations. Significant software development experience.

Experience in Go (our main backend language), Typescript/Javascript, C/C++, Python and Bash is desirable. Working knowledge of web-related protocols and technologies ( REST APIs, DOM, CSP), networking protocols (IP, TCP, UDP), and security protocols (TLS). Strong knowledge of security principles, best practices, and industry standards, such as NIST, ISO 27001, and CIS Critical Security Controls, OWASP ASVS and Testing Guides.

Familiarity with industry-standard security frameworks such as OWASP and NIST.

Experience with security tools such as SAST, DAST,



IAST, and SCA. Exceptional analytical and investigative skills, with hands-on experience in root cause analysis. Knowledge of current and emerging threats and techniques for exploiting security vulnerabilities.

Experience with CI/CD pipeline, security tools integration, and secure SDLC.

Experience with cloud-based infrastructure (AWS, Azure, or Google Cloud), and on best practices on how to secure cloud environments.

Advanced

Expertise familiarity with security considerations for AI/ML systems is desirable. Understanding of distributed systems design, implementation and operation. Understanding of privacy threats and controls, including on how to adapt generic best practices to specific scenarios in the product by providing detailed specifications to stakeholders.

Experience with enterprise log collection and analysis platforms (e.g., Education and Certifications Master's degree or equivalent experience preferred. Security certifications are a plus, including OSCP, OSEE, SANS/GIAC, CCSP, and CISSP. Excellent verbal and written communication, with the ability to translate complex security concepts to technical and non-technical stakeholders. Demonstrated ability to design, document, and implement new security processes.

Bachelors

Degree 5+ year of experience in security Engineering Travel Requirements Under 10% Relocation Provided None Position Type Experienced Referral Payment Plan Yes All qualified applicants will receive consideration for employment without regard to race, color, religion or belief, sex, sexual orientation, gender identity, national origin, disability, veteran status or any other legally-protected characteristic.

Company

Culture and Inclusion We are proud of our people-first and community-focused culture, empowering every Motorolan to be their most authentic self and to do their best work to deliver on the promise of a safer world. We’re committed to providing an inclusive and accessible recruiting experience for candidates with disabilities, or other physical or mental health conditions.

Motorola

Solutions adopte, favorise et promeut les principes de diversité, d’équité et d’inclusion. Nous offrons également des mesures d’adaptation pendant toutes les étapes du processus d’embauche afin de favoriser l’inclusion des personnes vivant avec un handicap physique ou mental.

At Motorola

Solutions we believe that everything starts with our people. We’re a global close-knit community, united by the relentless pursuit to help keep people safer everywhere. We build and connect technologies to help protect people, property and places. Our solutions foster the collaboration that’s critical for safer communities, safer schools, safer hospitals, safer businesses, and ultimately, safer nations. Connect with a career that matters, and help us build a safer future.

📌 Senior Software Engineer, Security Engineer (Vancouver)
🏢 Motorola Solutions
📍 Vancouver