AI Security Engineer

Oklahoma, United StatesWebsite

Full details on LinkedIn

The complete job description, requirements, and application details are available on the original posting.

About Trimble Inc.

Trimble Inc. is a global technology company founded in 1978, headquartered in Westminster, Colorado. It specializes in providing hardware, software, and services that connect the physical and digital worlds across various industries, including construction, agriculture, geospatial, and transportation. Trimble pioneered commercial GPS technology and has a rich history of innovation, including the launch of the first GPS receiver in 1984 and advancements in real-time kinematic GPS. The company offers integrated solutions that leverage GPS, GNSS, and positioning technologies. Its products and services include geospatial and surveying tools, construction and infrastructure solutions, and precision agriculture technologies. Trimble has established partnerships with notable companies like Caterpillar and Nikon, enhancing its offerings in construction and infrastructure. With operations in over 30 countries, Trimble emphasizes innovation, sustainability, and community impact through its initiatives.

Industry

information technology & services

Employees

13,000

2935 engineers

Revenue

$3.7B

Website

Visit →

Security at Trimble Inc.

Compiled from public job postings, careers pages, and company materials. Data may not reflect current state — verify during interviews.

3 Intel Signals

Security Philosophy

“Stated AppSec Mission: "Trimble Secure Development Life Cycle (TSDLC)"– Trimble Connect Security Whitepaper (https://www.trimble.com/downloads/3tr1aGKG6g1mcg870aMz8t/76e81449341a90bf7671553e1099ec44/Trimble_Connect_Security_Whitepaper_2024.pdf), ⚠️staleness "was established to ensure Trimble employees and applicable contractors build and operate secure applications, platforms and products"– Trimble Connect Security Whitepaper, ⚠️staleness Developer Enablement vs”

Security Team

Org Structure & Reporting Line: "VP - CISO"– Nick Banta profile (TheOrg / public profile), "Trimble maintains an information security management system"– Information Security Management page, Gaps & Contradictions: No public, verbatim statement found describing AppSec's precise org model (centralized vs. embedded) or explicit reporting chain beyond identification of the CISO role.
Key Public-Facing Leaders: Nick Banta, Vice President, Chief Information Security Officer – LinkedIn / public profile URL: https://www.linkedin.
LinkedIn Search Query Used: "site:linkedin.
Active AppSec Job Postings (as_of:): Count: 2 (evidence from public job postings) Evidence: "Your Title: Senior Application Security Engineer"– Job posting, "Trimble is hiring a remote Cybersecurity Architect"– Job listing, Common Skill/Tool Patterns: "SCA and SAST Leadership"– Senior Application Security Engineer posting, "Hands-on experience integrating security tools into CI/CD pipelines (e.g., Jenkins, Azure DevOps, GitLab CI, GitHub Actions)"– Senior Application Security Engineer posting, "Proven experience with other SAST tooling (e.g., Checkmarx, SonarQube, Fortify, Veracode)"– Senior Application Security Engineer posting, Gaps & Contradictions: No public statement providing a current headcount or org chart for AppSec.

Key Initiatives

Security Champions Program: Status: No Evidence Found."Shift Left in Practice: "Lead the integration of SCA into our CI/CD pipelines"– Senior Application Security Engineer posting, "Collaborate with development teams, architects, and product owners globally to embed security best practices throughout the SDLC"– Senior Application Security Engineer posting, Vulnerability Management Process: Intake: "Compliance metrics around security monitoring, vulnerability scanning"– Trimble Connect Security Whitepaper, ⚠️staleness Triage/Remediation: "Provide expert guidance and hands-on support for vulnerability remediation efforts"– Senior Application Security Engineer posting, No public, verbatim statements found specifying triage SLAs, MTTR targets, ticketing tool names, or how Jira (or other trackers) are used.
Secure SDLC Artifacts: "Participate in security reviews, threat modeling, and architecture discussions"– Senior Application Security Engineer posting, "All new Trimble Connect software versions and service updates are tested and validated"– Trimble Connect Security Whitepaper, Recent Initiatives (Last 6 Months): Evidence Found: Hiring for AppSec roles. "Your Title: Senior Application Security Engineer"– Job posting, "Trimble is hiring a remote Cybersecurity Architect"– Job listing, Gaps & Contradictions: No public, dated announcements (e.g., press releases, blog posts, or talks) describing new AppSec tool rollouts or policy changes within the last six months beyond active hiring.

Preparing for an AppSec interview?

Get the weekly briefing 2,000+ security pros trust.

Interested in this role?

Apply on LinkedIn