Trimble Inc.
Senior Application Security Engineer
At a Glance
About This Role
Source: Trimble Inc. careers · View original posting
Responsibilities
- Serve as the primary technical lead and subject matter expert for SCA across Trimble
- Drive the strategic vision, roadmap, and continuous improvement of our SCA implementation
- Lead the integration of SCA into our CI/CD pipelines, build systems, and development workflows
- Optimize our SCA policies, rules, and configurations
- Develop and implement strategies for managing and remediating open-source vulnerabilities
- Champion the adoption of SCA across all development teams
- Collaborate with development teams to embed security best practices throughout the SDLC
- Provide expert guidance for vulnerability remediation
- Develop and deliver security training programs
- Participate in security reviews and threat modeling
- Establish and report on key metrics and KPIs
- Automate security processes and tooling
- Respond to security incidents
- Mentor junior security engineers
Requirements
- Bachelor's degree in Computer Science, Information Security, or related field
- 5+ years of progressive application security experience
- 5+ years of expert-level SCA implementation experience
- Proven experience with SAST tooling
- Hands-on experience integrating security tools into CI/CD pipelines
- Strong understanding of application security vulnerabilities
- Proficiency in at least one major programming language
- Experience in agile development environments
- Exceptional communication and interpersonal skills
- Ability to drive strategy and influence change
- Ability to lead cross-functional teams
Benefits & Perks
About Trimble Inc.
Trimble Inc. is a global technology company founded in 1978, headquartered in Westminster, Colorado. It specializes in providing hardware, software, and services that connect the physical and digital worlds across various industries, including construction, agriculture, geospatial, and transportation. Trimble pioneered commercial GPS technology and has a rich history of innovation, including the launch of the first GPS receiver in 1984 and advancements in real-time kinematic GPS. The company offers integrated solutions that leverage GPS, GNSS, and positioning technologies. Its products and services include geospatial and surveying tools, construction and infrastructure solutions, and precision agriculture technologies. Trimble has established partnerships with notable companies like Caterpillar and Nikon, enhancing its offerings in construction and infrastructure. With operations in over 30 countries, Trimble emphasizes innovation, sustainability, and community impact through its initiatives.
Security at Trimble Inc.
Compiled from public job postings, careers pages, and company materials. Data may not reflect current state — verify during interviews.
Security Philosophy
“Stated AppSec Mission: "Trimble Secure Development Life Cycle (TSDLC)"– Trimble Connect Security Whitepaper (https://www.trimble.com/downloads/3tr1aGKG6g1mcg870aMz8t/76e81449341a90bf7671553e1099ec44/Trimble_Connect_Security_Whitepaper_2024.pdf), ⚠️staleness "was established to ensure Trimble employees and applicable contractors build and operate secure applications, platforms and products"– Trimble Connect Security Whitepaper, ⚠️staleness Developer Enablement vs”
Security Team
- Org Structure & Reporting Line: "VP - CISO"– Nick Banta profile (TheOrg / public profile), "Trimble maintains an information security management system"– Information Security Management page, Gaps & Contradictions: No public, verbatim statement found describing AppSec's precise org model (centralized vs. embedded) or explicit reporting chain beyond identification of the CISO role.
- Key Public-Facing Leaders: Nick Banta, Vice President, Chief Information Security Officer – LinkedIn / public profile URL: https://www.linkedin.
- LinkedIn Search Query Used: "site:linkedin.
- Active AppSec Job Postings (as_of:): Count: 2 (evidence from public job postings) Evidence: "Your Title: Senior Application Security Engineer"– Job posting, "Trimble is hiring a remote Cybersecurity Architect"– Job listing, Common Skill/Tool Patterns: "SCA and SAST Leadership"– Senior Application Security Engineer posting, "Hands-on experience integrating security tools into CI/CD pipelines (e.g., Jenkins, Azure DevOps, GitLab CI, GitHub Actions)"– Senior Application Security Engineer posting, "Proven experience with other SAST tooling (e.g., Checkmarx, SonarQube, Fortify, Veracode)"– Senior Application Security Engineer posting, Gaps & Contradictions: No public statement providing a current headcount or org chart for AppSec.
Key Initiatives
- Security Champions Program: Status: No Evidence Found."Shift Left in Practice: "Lead the integration of SCA into our CI/CD pipelines"– Senior Application Security Engineer posting, "Collaborate with development teams, architects, and product owners globally to embed security best practices throughout the SDLC"– Senior Application Security Engineer posting, Vulnerability Management Process: Intake: "Compliance metrics around security monitoring, vulnerability scanning"– Trimble Connect Security Whitepaper, ⚠️staleness Triage/Remediation: "Provide expert guidance and hands-on support for vulnerability remediation efforts"– Senior Application Security Engineer posting, No public, verbatim statements found specifying triage SLAs, MTTR targets, ticketing tool names, or how Jira (or other trackers) are used.
- Secure SDLC Artifacts: "Participate in security reviews, threat modeling, and architecture discussions"– Senior Application Security Engineer posting, "All new Trimble Connect software versions and service updates are tested and validated"– Trimble Connect Security Whitepaper, Recent Initiatives (Last 6 Months): Evidence Found: Hiring for AppSec roles. "Your Title: Senior Application Security Engineer"– Job posting, "Trimble is hiring a remote Cybersecurity Architect"– Job listing, Gaps & Contradictions: No public, dated announcements (e.g., press releases, blog posts, or talks) describing new AppSec tool rollouts or policy changes within the last six months beyond active hiring.
Preparing for an AppSec interview?
Get the weekly briefing 2,000+ security pros trust.
Interested in this role?
Apply on Trimble Inc.'s site