About Us
We are a global climate technologies company engineered for sustainability. We create sustainable and efficient residential, commercial and industrial spaces through HVACR technologies. We protect temperature-sensitive goods throughout the cold chain. And we bring comfort to people globally. Best-in-class engineering, design and manufacturing combined with category-leading brands in compression, controls, software and monitoring solutions result in next-generation climate technology that is built for the needs of the world ahead.
Whether you are a professional looking for a career change, an undergraduate student exploring your first opportunity, or recent graduate with an advanced degree, we have opportunities that will allow you to innovate, be challenged and make an impact. Join our team and start your journey today!
Senior Security Engineer
Job Description
The Senior Security Engineer will be a hands-on security professional with experience in offensive security, embedded systems, product security, and vulnerability research. This role will be responsible for helping to build, mature, and support the Copeland Product Security Program. This cross-functional position will work directly with product development teams to assess, design, test, and improve the security of Copeland products and services throughout their lifecycle.
This position will also support Product Security Incident Response Team (PSIRT) activities, coordinated vulnerability disclosure, and cybersecurity regulatory readiness efforts including the EU Cyber Resilience Act (CRA).
As a Security Engineer, You Will:
Product Security Testing & Research
Perform product security testing and reporting, including but not limited to:
Black-box reverse engineering of hardware and firmware
Vulnerability research
Exploit development
Fuzz testing
Protocol reverse engineering
Hardware security assessments
Embedded software security reviews
Penetration Testing
Conduct manual penetration testing of:
Mobile Applications (iOS & Android)
Web Applications
APIs and Microservices
Cloud Infrastructure
Network Systems
IoT Devices
Product Security Engineering
Facilitate threat modeling with product, application, infrastructure, and engineering teams.
Conduct architecture and design reviews to identify security weaknesses early in the development lifecycle.
Support Secure Development Lifecycle (SDL) activities and Secure-by-Design initiatives.
Review security requirements for connected products and cloud-based solutions.
Partner with engineering teams to develop effective security controls and mitigations.
PSIRT & Vulnerability Management
Support Product Security Incident Response Team (PSIRT) operations.
Investigate and validate externally reported vulnerabilities.
Coordinate vulnerability triage, remediation, and disclosure activities.
Participate in CVE identification, CVSS scoring, and security advisory development.
Engage with security researchers, vulnerability disclosure programs, and industry partners.
Assist with incident response activities involving Copeland products.
AI & Emerging Technology Security
Perform security assessments of AI/ML and Generative AI-enabled products and services.
Evaluate risks associated with AI agents, model supply chains, prompt injection, model poisoning, and data leakage.
Help define security controls for AI-powered products and services.
Assess third-party AI technologies and integrations for security risk.
Security Awareness & Program Development
Perform security training and outreach to development and engineering teams.
Support security champion programs and secure coding initiatives.
Maintain product security metrics, documentation, dashboards, and operational procedures.
Assist with continuous improvement of product security tools and processes.
Regulatory & Compliance Support
Support cybersecurity compliance initiatives related to connected products.
Assist with vulnerability management and reporting obligations under cybersecurity…