Toyota is looking to ensure the integrity and security of its applications and systems by defending against external threats, and is seeking a Principal Engineer - DevSecOps to develop, maintain, and refine cybersecurity policies, guidelines, and design patterns.
Requirements
- 5+ years of experience in cybersecurity, with a strong focus on securing AI/ML systems, cloud platforms (AWS, Azure, GCP), and enterprise applications
- Deep understanding of machine learning infrastructure and risks, including model training, inference, data pipelines, and common AI attack vectors (e.g., model poisoning, data leakage)
- Proven experience conducting threat modeling and architecture reviews for AI/ML and cloud-native workloads
- Strong knowledge of secure system architecture, networking, container security (Kubernetes, Docker), and cloud security controls (IAM, encryption, segmentation)
- CISSP (Certified Information Systems Security Professional), AWS, Azure, GCP, and SANS certifications
Responsibilities
- Design and implement secure hybrid/cloud enterprise solutions that align with TMNA’s security standards, architectural patterns, and emerging threat landscape.
- Write and maintain clear, actionable security standards, guidelines, and reusable architectural patterns that support secure development across application, data, and AI/ML teams.
- Develop comprehensive threat models for complex applications, communicating effectively with application teams to address and remediate vulnerabilities.
- Establish, refine, and integrate security-related processes with engineering, DevOps, and data science teams.
- Communicate effectively with diverse technical and non-technical stakeholders, helping teams understand vulnerabilities, implement remediations, and adopt security best practices.
Other
- To save time applying, Toyota does not offer sponsorship of job applicants for employment-based visas or any other work authorization for this position at this time.
- A work environment built on teamwork, flexibility and respect
- Professional growth and development programs to help advance your career, as well as tuition reimbursement
- Applicants for our positions are considered without regard to race, ethnicity, national origin, sex, sexual orientation, gender identity or expression, age, disability, religion, military or veteran status, or any other characteristics protected by law.
- An advanced degree in Cyber Security Management or related discipline
