Product Security Lead
Irvine, CA
Category: Security
Industry: Manufacturing
Standard Hours: Open
Reference ID: JN -092026-108664
Date Posted: 09/17/2026
Shortcut: http://careers.eliassen.com/7FFsE6
Description:
On-site Monday–Thursday in Irvine, CA
Our client seeks a Product Security Lead to build, own, and mature the product security program. The role will partner with an MSP to implement EU Cyber Resilience Act (CRA) compliance, then transition to full program ownership. The scope includes coordinating internal stakeholders, validating MSP deliverables, establishing governance and secure development practices, managing SBOMs and vulnerability processes, and preparing for ISO/SAE 21434 expansion. The position reports to the CISO and is expected to evolve into a player-coach role with 1–2 direct reports as the program scales. Familiarity with semiconductor industry practices is a plus. On-site presence is required Monday through Thursday to support internal customers across engineering, quality, legal, and related functions.
This is a contract to hire opportunity. Applicants must be willing and able to work on a w2 basis and convert to FTE following contract duration. For our w2 consultants, we offer a great benefits package that includes Medical, Dental, and Vision benefits, 401k with company matching, and life insurance.
Rate: $70.00 to $80.00/hr. w2
JN -092026-108664
Responsibilities:
- Serve as primary liaison to the MSP during the EU CRA compliance engagement.
- Coordinate engineering, product, legal, quality, and supply chain to meet MSP timelines and deliverables.
- Ensure timely provision of product architecture, SBOMs, and vulnerability handling information for CRA conformity assessments.
- Review and validate MSP outputs, including risk assessments, technical documentation, and gap analyses.
- Track CRA milestones, manage risks and blockers, and escalate issues to the CISO as needed.
- Build internal understanding of CRA obligations and conformity assessment pathways.
- Assume full ownership of the product security program after MSP transition.
- Establish governance, policies, and procedures for secure development, vulnerability management, incident response, and supply chain risk.
- Define and report KPIs and metrics to demonstrate maturity and compliance posture.
- Manage relationships with regulators, auditors, and external assessors.
- Maintain technical documentation, SBOMs, and risk assessments as products evolve.
- Manage coordinated vulnerability disclosure and product security incident response.
- Build the business case to hire and lead 1–2 direct reports as scope grows.
- Design and implement a roadmap for ISO/SAE 21434 compliance including CSMS and TARA.
- Integrate ISO 21434 requirements with CRA activities to avoid duplication.
- Partner with engineering, hardware, and firmware teams to embed security through the lifecycle.
- Prepare for ISO 21434 audits and assessments.
- Champion a security-first culture and advise leadership on evolving standards such as CRA, ISO 21434, and NIS2.
- Collaborate with Legal and Compliance on regulatory interpretation and reporting.
- Present program status, risks, and roadmap to leadership and the board with the CISO.
Experience Requirements:
- 7+ years in product security, application security, or cybersecurity engineering with program ownership experience.
- Working knowledge of EU CRA requirements or strong ability to ramp on complex regulatory frameworks.
- Experience managing external vendors or consultants such as MSPs or MSSPs.
- Strong understanding of SSDLC and SDLC practices.
- Experience with vulnerability management, SBOM generation and management, and coordinated vulnerability disclosure.
- Effective stakeholder management and communication across executive, legal, and engineering audiences.
- Experience maturing a compliance-driven security program into an operational function.
- Comfort operating as an individual contributor with interest in people leadership.
- Willingness and ability to work on-site 4 days per week.
- Preferred: ISO/SAE 21434 experience including CSMS and TARA.
- Preferred: Semiconductor industry experience across hardware, firmware, and supply chain security.
- Preferred: Prior small-team leadership experience.
- Preferred: Certifications such as CISSP, CISM, ISO 21434 practitioner or auditor.
- Preferred: Familiarity with NIS2, IEC 62443, UNECE WP.29/R155, and conformity assessment processes.
- Preferred: Regulated hardware or embedded systems industry experience.
Education Requirements:
- Bachelor’s degree in Computer Science, Engineering, Cybersecurity, or equivalent practical experience.
Skills, experience, and other compensable factors will be considered when determining pay rate. The pay range provided in this posting reflects a W2 hourly rate; other employment options may be available that may result in pay outside of the provided range.
W2 employees of Eliassen Group who are regularly scheduled to work 30 or more hours per week are eligible for the following benefits: medical (choice of 3 plans), dental, vision, pre-tax accounts, other voluntary benefits including life and disability insurance, 401(k) with match, and sick time if required by law in the worked-in state/locality.
If anyone reaches out to you about an open position connected with Eliassen Group, please ensure that you are working directly with us by confirming the following:
· When you work with Eliassen Group, all email communication will come from an Eliassen.com address, never Gmail, Yahoo, etc.
· Eliassen Group will never ask you for personal information (home address, bank account, or check routing number) until you have worked with someone clearly associated with Eliassen Group.
If you have any indication of fraudulent activity, please contact fraud@eliassen.com.
-
Senior Cybersecurity Engineer
Anywhere
Description: Remote in either Remote or Washington, DC Our client is seeking a hands-on Senior Cybersecurity Engineer to help strengthen and scale cybersecurity practices across a growing software organization supporting mission-critical environments. ...
Date Posted: 09/18/2026 Recommended
-
Business Analyst
Cincinnati, OH
Description: On-site in Cincinnati, OH Our client seeks a Business Analyst to lead a Vulnerability and Patch Automation Initiative. The role drives the vision, roadmap, and execution of enterprise efforts to accelerate vulnerability remediation, automa...
Date Posted: 09/10/2026 Recommended
-
Cloud Application Software Security Engineer
St. Louis, MO
Description: Hybrid 4 days on-site, 1 day work from home in St. Louis, MO Our client seeks a Cloud Application Software Security Engineer to remediate vulnerabilities and mature SDLC pipelines. The role will focus on addressing findings from Mythos, CV...
Date Posted: 09/08/2026 Recommended
-
Mainframe Security Expert
Pittsburgh, PA
Description: Hybrid 4 days onsite in Pittsburgh, PA Our client seeks a Mainframe Security expert to execute day-to-day project tasks, perform detailed analytics, guide asset modeling, and produce project documentation. The role will serve as a subject ...
Date Posted: 09/09/2026 Recommended
-
Junior Penetration Tester
Anywhere
Description: Remote Our client seeks a Junior Penetration Tester to support security assessments across web applications, infrastructure, cloud environments, and related technologies connected to the client network. The role will develop test plans, pe...
Date Posted: 09/15/2026 Recommended
-
Product Manager
Chicago, IL
Description: Hybrid 3 days onsite or remote in Chicago, IL Our client seeks a Product Manager to lead the Card Delivery Platform (CDS) stack with a focus on efficiency, stability, and operational excellence. The role oversees daily platform operations ...
Date Posted: 08/26/2026 Recommended
-
Site Reliability Engineer
Norfolk, VA
Description: On-site in either Norfolk, VA or San Diego, CA or Honolulu, HI Our client seeks a Site Reliability Engineer to support the NMCI Service Management Integration and Transport program. The role focuses on reliability, performance, and scalabi...
Date Posted: 09/16/2026 Recommended
-
Junior System Administrator
Norfolk, VA
Description: On-site in Norfolk, VA Our client seeks a mission-oriented junior System Administrator with 1-3 years of experience to provision, install, configure, operate, and maintain system hardware, software, and related infrastructure. The role sus...
Date Posted: 09/16/2026 Recommended
-
Sr. Cloud Engineer (Azure)
Anywhere
Description: Remote Our client is seeking a Sr. Cloud Engineer (Azure) to design, deploy, secure, and optimize enterprise cloud infrastructure within Microsoft Azure for federal customers. The role includes implementing scalable cloud solutions, automa...
Date Posted: 08/20/2026 Recommended
-
Information Security Data Visualization Engineer (PowerBI)
Anywhere
Description: Remote Our client seeks an Information Security Data Visualization Engineer who will design, develop, and maintain Microsoft Power BI dashboards, reports, scorecards, and interactive visualizations that provide visibility into cybersecurit...
Date Posted: 08/30/2026 Recommended
-
Senior Software Developer
Charlotte, NC
Description: Hybrid Open to Remote - Must be EST Hours in Charlotte, NC Our client seeks a Senior Software Developer to build automation and monitoring solutions supporting data and transport networks. You will design, develop, and maintain Django appl...
Date Posted: 09/10/2026 Recommended
-
Senior Security Engineer
Los Angeles, CA
Description: Hybrid Fully Remote until West LA office opens - then 3x a week onsite in Los Angeles, CA Our client is seeking an experienced Senior Security Engineer with a focus on security architecture assessments across on-premises and Azure environm...
Date Posted: 08/20/2026 Recommended
-
Lead Data Engineer
Charlotte, NC
Description: Hybrid 3 on in Charlotte, NC Our client seeks a Lead Data Engineer to own architecture and delivery of scalable data platforms on AWS. The role will lead design of data lakes and warehouses, govern IAM and security, and implement resilient...
Date Posted: 09/09/2026 Recommended
-
Product Manager, AI-Enabled Member Experience
Anywhere
Description: Remote We are seeking a senior Product Manager to help drive the transformation of our client's member experience through a new AI-first digital ecosystem. This role will focus on mobile-first product experiences, intelligent search and me...
Date Posted: 09/12/2026 Recommended
-
Cybersecurity Operations Lead
Alexandria, VA
Description: Hybrid, 2-3 days per week on-site in Alexandria, VA. The first 30 days of work will be full-time on-site in Alexandria, VA in Alexandria, VA Our client seeks a Cybersecurity Operations Lead to provide hands-on technical leadership across c...
Date Posted: 09/08/2026 Recommended
-
Full Stack Engineer
Englewood, CO
Description: Hybrid 4 onsite / 1 work from home in Englewood, CO Our client seeks a Full Stack Engineer to design, build, and enhance scalable video delivery platforms and applications for streaming and media experiences. The role spans backend service...
Date Posted: 09/13/2026 Recommended
-
Sr Test Development Engineer
Anywhere
Description: Remote Our client seeks a Sr Test Development Engineer to lead and build end-to-end automated tests for integrated software and firmware within CGM systems. The role will design, develop, execute, and maintain automated test solutions, inc...
Date Posted: 09/03/2026 Recommended
-
Tech Lead/Solutions Architect
Anywhere
Description: Remote Our client seeks a hands-on Tech Lead with strong Architecture capabilities to bridge Finance, Accounting, IT, and Development. The role combines technical leadership, hands-on development, finance systems expertise, and stakeholder...
Date Posted: 09/09/2026 Recommended
-
Salesforce WFM Program Manager
Charlotte, NC
Description: Hybrid 4 onsite in either Charlotte, NC or St. Louis, MO Our client seeks a program leader to own the end-to-end Salesforce Workforce Management roadmap for field operations. The role shall translate business priorities into executable pla...
Date Posted: 09/01/2026 Recommended
-
Data Engineer
Norfolk, VA
Description: On-site in Norfolk, VA Our client seeks a Data Engineer to design, build, integrate, and sustain secure enterprise data solutions that enable reliable analytics, reporting, operational insight, and informed decision-making. The role develo...
Date Posted: 09/16/2026 Recommended
-
Senior Software Engineer IV
Charlotte, NC
Description: Hybrid 3 on in Charlotte, NC Our client seeks a Senior Software Engineer to build and evolve enterprise AWS-based data platforms supporting Swift and Fabric Access Bridge. The role combines hands-on engineering with technical leadership ac...
Date Posted: 08/30/2026 Recommended
-
Lead Software Engineer
Los Angeles, CA
Description: Hybrid Fully Remote until West LA office opens - then 3x a week onsite in Los Angeles, CA Our client is seeking a highly skilled and motivated Lead Software Engineer to join their BaaS team, supporting partner onboarding and BaaS platform ...
Date Posted: 08/20/2026 Recommended
-
Senior Software Engineer
Boston, MA
Description: Hybrid At least 2 days per week in office in Boston, MA Our client seeks a Senior Software Engineer to join the team and lead design, delivery, and technical strategy for scalable, secure, and reliable data platforms. You will work across ...
Date Posted: 09/13/2026 Recommended
-
Sr. Scrum Master
Charlotte, NC
Description: Hybrid 3 on in Charlotte, NC Our client seeks a Lead Scrum Master to coach Agile teams within an infrastructure-focused environment. The role will guide teams on Agile principles and practices, facilitate key Agile ceremonies, and promote ...
Date Posted: 09/15/2026 Recommended
-
Sr. Security Engineer (Trellix)
Washington dc, DC
Description: On-site in Washington, DC As a Sr. Security Engineer (Trellix), you will serve as the technical lead for our client's endpoint security and data protection ecosystem. You will balance day-to-day operational support with strategic cybersecu...
Date Posted: 08/25/2026 Recommended
-
Security Engineer, Incident Response
Burbank, CA
Description: Hybrid 4 Days a week on-site in Burbank, CA Our client has an opportunity for a Security Engineer, Incident Response on an initial 3-month contract with expected extensions. The role will provide additional coverage while full-time team me...
Date Posted: 09/14/2026 Recommended
-
Senior Data Engineer
Charlotte, NC
Description: Hybrid 3 days on-site in Charlotte, NC Our client seeks a Senior Data Engineer to lead database architecture, data migration, and real-time data product initiatives supporting a modern cloud-based platform. The role will establish a scalab...
Date Posted: 09/13/2026 Recommended
-
HCL Configuration Engineer
Anywhere
Description: Remote Our client is seeking two experienced HCL Configuration Engineers to support deployment, configuration, and ongoing management of enterprise AI platforms including Claude, ChatGPT, and Gemini. The ideal candidate will bring 7-10 yea...
Date Posted: 09/10/2026 Recommended
-
Software Engineer
San Diego, CA
Description: On-site in San Diego, CA Our client seeks a Software Engineer to support a project at a Navy base in San Diego. The role includes analysis, design, development, and testing of applications. The engineer will develop across Linux and Androi...
Date Posted: 09/05/2026 Recommended
-
Senior AWS Cloud Architect/Engineer
Reston
Description: On-site in Reston, VA As a Senior AWS Cloud Architect/Engineer, you will be a key player in architecting, designing, and implementing cloud solutions that empower our clients to leverage the full potential of cloud technologies. You will b...
Date Posted: 08/25/2026 Recommended
Eliassen Group is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, protected veteran status, or disability status. Eliassen Group’s Affirmative Action Plan (AAP) is available for inspection by any employee or applicant for employment upon request, during normal business hours of Monday through Friday, 8:30am to 5:30pm EST. Interested persons should contact Phaedra Wells at pwells@eliassen.com for assistance. It is unlawful in Massachusetts and Maryland to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.
Applicants with disabilities that believe they require an accommodation or assistance with a position, please email our HR team at hradmin@eliassen.com. This email inbox is designed exclusively to assist job seekers whose disability prevents them from being able to apply online. Emails sent for other purposes will not receive a response.
Please be advised that a number of fraudulent job postings have been released under the Eliassen Group brand.
Unfortunately, fraudulent job postings can happen. If anyone reaches out to you about an open position connected with Eliassen Group, never provide personal or financial information to anyone who is not clearly associated with Eliassen Group
If anyone seemingly from Eliassen Group has ever requested this personal information in the past or does so in the future, please contact fraud@eliassen.com.
Please ensure that you are working directly with us by confirming the following:
- When you work with Eliassen Group, all email communication will come from an Eliassen.com address, never Gmail, Yahoo, etc.
- Eliassen Group will never ask you for personal information (home address, bank account, or check routing number) until you have worked with someone clearly associated with Eliassen Group, as indicated above