Description

Lead security assessments for firmware, drivers, and system software while owning the implementation of the Security Development Lifecycle (SDL) and providing technical consultation to engineering teams.

This role is on-site.

Responsibilities

• Conduct security assessments including threat modeling, DAST, SAST, and SCA.
• Advise engineering teams on implementing SDL stages independently.
• Review and advise on secure design and mitigation analysis for various SDL stages.
• Refine software security best practices to continuously improve organizational approaches.

Required Skills

• 5+ years of experience in software security.
• Expertise in developing and reviewing software threat models.
• Deep experience in security concept design and mitigation analysis.
• Proven ability to write secure code and design secure software for low-level systems like drivers and firmware.
• Advanced secure code review skills in C and C++ for complex software projects.
• Proficiency in automation using Python.
• Experience performing Software Composition Analysis using tools like Black Duck.
• Demonstrated experience implementing a Security Development Lifecycle within an organization.
• Degree in any graduate field.

Key Skills

Education

Any Graduate