Brunswick Corporation
Senior Product Security Engineer
Full details on LinkedIn
The complete job description, requirements, and application details are available on the original posting.
About Brunswick Corporation
Brunswick Corporation is an American company founded in 1845, headquartered in Mettawa, Illinois. It designs, manufactures, and markets a wide range of recreation and leisure products, evolving from its origins in billiards to becoming a leader in marine recreation with brands like Mercury Marine. The company employs over 18,500 people across 29 countries and reported sales of $5.2 billion in 2024. Brunswick's product portfolio includes billiards tables, cues, and bowling equipment, as well as outboard motors and boats. The company has a rich history of innovation and adaptation, having diversified its offerings over the years to include technical products and medical lines. With a strong emphasis on marine recreation today, Brunswick continues to build on its legacy while serving a broad consumer and commercial market.
Security at Brunswick Corporation
Compiled from public job postings, careers pages, and company materials. Data may not reflect current state — verify during interviews.
Security Philosophy
- Brunswick's stated AppSec mission includes implementing secure software development lifecycle (SSDLC) practices and driving security culture adoption across all product development teams. Their approach to developer enablement involves overseeing security code review processes and developer security training programs. The company's risk philosophy includes conducting threat modeling and security assessments for embedded system designs.
- Stated pain points or goals include managing vulnerability disclosure programs and coordinating security incident response.
- No public single-page 'AppSec mission' statement was found beyond job descriptions.
Security Team
The AppSec team's organizational structure indicates reporting to the Chief Information Security Officer (CISO). Key public-facing leaders include Julie Myerholtz, Chief Information Security Officer, who was recognized with the 'Top Global CISO Award 2025'. Team size estimates are not publicly available. As of, there are 2 active AppSec job postings (Product Security Director JR-047602 and Information Security Operations Director JR-048149). Common skill and tool patterns mentioned include SAST, DAST, IAST, SCA, static analysis tools, programming languages like C/C++, Python, Java, Assembly, and cloud platforms such as AWS, Azure, and GCP security services. No public org-chart or team-size disclosure is available.
Key Initiatives
- Brunswick does not publicly show evidence of a Security Champions Program.
- Their 'Shift Left' practices include implementing secure software development lifecycle (SSDLC) practices and overseeing security code review processes and developer security training programs. The vulnerability management process involves intake through managing enterprise-wide vulnerability scanning, assessment, and remediation programs, and triage/remediation by partnering with infrastructure teams to prioritize and mitigate risks.
- Secure SDLC artifacts include leading threat modeling exercises for application architectures and overseeing security code review processes.
- No public statements or press about new AppSec tool rollouts or policy changes were found in the last six months.
- No explicit public SLAs/MTTR or ticketing ownership language for application vulnerabilities was found.
Preparing for an AppSec interview?
Get the weekly briefing 2,000+ security pros trust.