Senior Training Engineer: Product Security

Are you passionate about providing learning and development on MathWorks product security principles? Do you enjoy helping teams understand secure development workflows, coding practices, threat modeling, and other principles? Are you interested in training new staff members and coaching them as they apply security principles to their work? Do you enjoy implementing and improving processes that make products more secure?

You will work with an internal community that partners with managers and staff to capture and share security knowledge, create and deliver learning resources to help staff members build expertise in product security, and apply secure development practices throughout the software lifecycle. Additionally, you will focus on improving processes, standards, and skills that strengthen the security of MathWorks products.

• Conduct thorough needs analysis to identify skill gaps and learning requirements related to product security, secure coding practices, and compliance standards. Evaluate whether training is the appropriate solution
  

• Design creative ways to train, coach, and support staff members’ product security learning, including secure development practices, secure coding, and more. For example, develop training content and deliver instructor-led sessions, workshops, and self-serve resources tailored to product security learning needs. Measure impact using Kirkpatrick Level 1–4 evaluations

• Facilitate organizational adoption of new security processes, tools, and standards through thoughtful change management strategies. Plan and conduct rollouts and help staff successfully adopt secure development practices. Report progress against business drivers to senior staff
  

• Develop a deep understanding of software security concepts, practices, and tools used at MathWorks and within the industry (e.g., threat modeling, secure coding guidelines, vulnerability management)
  

• Collaborate with senior leaders to identify security-related issues and opportunities impacting Development teams. Develop clear, well-scoped problem statements and drive related projects to completion
  

• Identify internal security experts and ensure key knowledge is captured and shared. Continuously review, catalog, and promote user-created security documentation and resources

• Continuously update and maintain the security learning catalog to ensure content quality, relevance, and alignment with emerging threats and best practices