Itron, Inc.
Global Technology Category Manager - Software Security & IT Services
Full details on LinkedIn
The complete job description, requirements, and application details are available on the original posting.
About Itron, Inc.
Itron, Inc. is an American technology company founded in 1977 and based in Liberty Lake, Washington. The company specializes in energy and water resource management solutions, focusing on efficient utility meter reading technologies. Itron offers a wide range of products, including electricity, gas, and water meters, as well as advanced metering infrastructure and smart grid communication systems. Itron provides various services, such as consulting for energy efficiency and demand response programs, installation of metering infrastructure, and managed services to support utility operations. The company serves a global customer base, primarily utilities and municipalities, and is involved in smart grid modernization and smart city initiatives. Itron has expanded its reach internationally and has formed partnerships for smart metering projects in regions like Fiji and Europe. With a strong presence in the market, Itron employs over 5,000 people and is recognized for its contributions to clean energy manufacturing and innovation.
Security at Itron, Inc.
Compiled from public job postings, careers pages, and company materials. Data may not reflect current state — verify during interviews.
Security Philosophy
- Itron states a strong commitment to security, asserting they care about it even more than their customers, and that their security framework is integrated throughout all business aspects.
- They define and implement application security metrics in alignment with each application's business objectives.
Security Team
Itron supports and enables Security Champions across squads. Andrew Pendray is a Sr. Product Manager involved with security in AMI 2.0.
Key Initiatives
- Itron conducts security training for developers and operates a vulnerability disclosure program for security issues found in its products and services.
- Their development process includes automated tests and SAST for new artifacts, and all deployments to pre-production or production environments require secondary approval.
- They define and implement application security metrics aligned with business objectives, tracking vulnerabilities by detection source (design review, code review, SAST, DAST, penetration test, VDP, or bug bounty).
- The company designs and implements security tooling and automation in CI/CD pipelines, supports Security Champions across squads, and leads threat modeling for critical features and systems. They also focus on security in AMI 2.0, noting that AMI 2.0 meters are full-blown computers with Linux container environments.
Preparing for an AppSec interview?
Get the weekly briefing 2,000+ security pros trust.
Interested in this role?
Apply on Itron, Inc.'s site