Job Description

Dover is a diversified global manufacturer with annual revenue of over $7 billion. We deliver innovative equipment and components, specialty systems, consumable supplies, software and digital solutions, and support services through five operating segments: Engineered Products, Fueling Solutions, Imaging & Identification, Pumps & Process Solutions and Refrigeration & Food Equipment. Dover combines global scale with operational agility to lead the markets we serve. Recognized for our entrepreneurial approach for over 60 years, our team of approximately 24,000 employees takes an ownership mindset, collaborating with customers to redefine what's possible. Headquartered in Downers Grove, Illinois, Dover trades on the New York Stock Exchange under DOV. Additional information is available at dovercorporation.com.

Position Summary (Location open to IL, TX, MA)

Dover is seeking to hire a Sr Director, Product and IoT Security Leader, to drive the security activities of our evolutionary digital products, to incorporate privacy and data security for all of our connected categories. In this role, you will be responsible for the overall security roadmap of Dovers IoT products, gathering customer feedback while understanding customer needs and pain points. You will be leading global product and systems security initiatives, internal and external security partnerships, secure development lifecycle training, governance, strategy, programs, policies, risk management, communication, change management, audit, assessments, and certification associated with connected products & plants. Our ideal candidate has extensive knowledge of IoT products, and advanced industry knowledge to keep us on the cutting edge. From day one, youll have an immediate impact on the day-to-day efficiency of our evolving digital capabilities, and an ongoing impact on our overall growth.

Job Responsibilities:

* Build and oversee the Security program for the Dover Operating companiess IoT or digitally connectable products and connected factories.
* Establish security program management methodologies, in close collaboration with the product development teams
* Establish through the program, SDLC methodologies on digital products and plants edge, connectivity, and and cloud platform security
* Identify and establish participation in the appropriate industry standards and standard bodies that have a direct impact on Dovers connected products
* Identity and engage external partner ecosystem for a stronger product offering through better and communicable enhancements in product security
* Develop a common framework for IoT and plant security standards and roll out across the organization
* Establish governance model to maintain a high level of product security vigilance throughout the product lifecycle and across functional boundaries
* Analyze and assist in the secure design, architecture and implementation of IoT devices, connection services and IoT cloud
* Collect and assess market requirements by conducting market research supported by market data and on-going customer visits
* Analyze competitive landscape and new business opportunities in the IoT market
* Work closely with R&D, engineering, and technology teams to deliver high-quality products on schedule, and build security standards with the goal for UL certification
* Be active in strategic discussions with vendors, internal stakeholders and corporate leadership
* Build positive relationships and trust through strong cross-team interactions, on-time delivery, high-quality products, continuous innovation, and exceeding expectations

Education and Experience Requirements:

* Experience in identifying & communicating security value proposition of products to customers and partners
* Background in consulting on cyber, product or plant security preferred
* Experience with IoT device specific communication/network technologies
* Experience with embedded software and operating systems, Windows, and Linux
* Experience analyzing security of cloud-based interfaces of IoT devices
* Management of penetration testing used to identify weaknesses in the transmission and storage of data
* Experience with reverse engineering, disassemblers, debuggers, and developing exploits
* High level understanding of vulnerabilities and attack methods, with the ability to explain security issues such as privilege escalation, buffer overflows, SQLi, etc., how to identify them, and what tools are best used for each
* Experience managing teams around Common Weakness Enumeration (CWE), Common Vulnerability Scoring System (CVSS), Common Vulnerabilities and Exposures (CVS and Open Web Application Security Project (OWASP)) processes and remediation recommendations
* Encryption (both at-rest and in-transit) and related cryptography, authentication services
* Bachelors or masters degree in a computer field
* 10+ years of total industry experience
* Master Degree in Computer Science or related discipline desirable

All qualified applicants will receive consideration for employment without discrimination on the basis of race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, disability, age, genetic information, or any other factors prohibited by law.