Description

Lead security assessments for firmware, drivers, and system software. Own the implementation of the Security Development Lifecycle (SDL) and provide technical consultation to engineering teams.

Responsibilities

• Conduct security assessments including threat modeling, DAST, SAST, and SCA.
• Advise engineering teams on implementing SDL stages independently.
• Review and advise on secure design and mitigation analysis for various SDL stages.
• Refine software security best practices to continuously improve organizational approaches.

Required Skills

• 5+ years of experience in software security.
• Expertise in developing and reviewing software threat models.
• Deep experience in security concept design and mitigation analysis.
• Proven ability to write secure code and design secure software for low-level systems like drivers and firmware.
• Advanced secure code review skills in C and C++ for complex software projects.
• Proficiency in automation using Python.
• Experience performing Software Composition Analysis using tools like Black Duck.
• Demonstrated experience implementing a Security Development Lifecycle within an organization.
• Degree in any graduate field.

Key Skills

Education

Any Graduate