Description
Join the future of mobility. Help build the platform that's changing how cities move.
NoTraffic is the world’s leading mobility platform, transforming intersections into connected infrastructure that improves flow, boosts safety, and prepares cities for the autonomous era.
We're looking for a Product Security Lead to own product security across our edge device fleet, cloud platform, and applications. It's a hands-on, senior role where your work has visible, real-world impact: our platform controls live traffic signals at thousands of intersections, so strong security is part of what makes cities trust us with their infrastructure. You'll set the security bar for the whole product and lead the work that keeps us there.
Your day to day will look like:
- Own product security across the stack. Set the strategy and the standards for edge devices, cloud services, and the application layer. Know where our real risks are, and drive the work that reduces them
- Bake security into how we build. Lead security reviews of new features from design through implementation. Own how we handle secure development, dependency scanning, and secrets. Catch problems early, and give engineers clear, practical guidance instead of blockers
- Run vulnerability triage and response. Assess incoming vulnerabilities, judge real-world impact, and coordinate the response across R&D so the right fix ships fast
- Keep a living view of our security posture. Run continuous assessment across the product, maintain a risk-ranked security backlog, and make sure the highest-impact work stays at the top
- Harden the edge fleet. Threat-model hardware deployed in the field at customer intersections, where physical access and long device lifecycle
- Run penetration tests. Own the penetration testing program: Manage external 3rd-party vendors, coordinate tests, and validate findings and remediation claims.
- Manage compliance frameworks. SOC 2, ISO 27001, and other future industry certifications to ensure our platform maintains the highest security standards.
- Put AI to work. Use AI and agentic tools throughout your own work, and build them into our security stack: AI-assisted SAST, automated triage, agents that expand your coverage well past what one person could review by hand. Treat AI as a force multiplier for the whole security function
Requirements
- 8+ years in information security, including 2+ leading application security
- Deep experience with both cloud and IoT or edge-based products
- Hands-on with AI and agentic tools, with a track record of building them into real workflows
- Experience meeting the security bar that public-sector customers expect, such as SOC 2, ISO 27001, or NIST frameworks
- Strong command of network protocols
- Comfort in Linux and a scripting language such as Python
- Working knowledge of DevOps practices
Nice to have:
- Experience securing critical infrastructure
- Familiarity with connected-vehicle or transportation security standards
- A background in offensive security or penetration testing
- Systems-level programming (C, C++, Go, or Rust)
