Role Overview:

We are seeking a seasoned Security Software Developer to join our engineering team in Bangalore, focusing on hardening our high-scale telecom infrastructure. In this role, you will lead the design and implementation of robust security features, working closely with cross-functional product and infrastructure teams to identify and mitigate vulnerabilities within our software stack.

Your work will directly impact the resilience of our global telecom services, ensuring that millions of users experience secure and uninterrupted connectivity.

By bridging the gap between low-level system programming and advanced security protocols, you will play a pivotal role in safeguarding our architecture against evolving cyber threats.

Key Responsibilities:

- Architect and develop secure, high-performance software components using C++ to ensure the integrity of our telecom network infrastructure.

- Conduct deep-dive security audits and vulnerability assessments to identify and remediate security defects before they reach production environments.

- Integrate and manage automated security scanning tools, such as Black Duck, into the CI/CD pipeline to maintain a proactive security posture across the development lifecycle.

- Collaborate with DevOps and system engineering teams to implement secure coding standards and harden Linux-based environments against unauthorized access.

- Utilize platforms like Cohesity to manage data protection and security workflows, ensuring compliance with industry-standard security frameworks.

Required Skillset :

- 5 to 8 years of hands-on experience in C/C++ software development on Linux-based embedded or telecom platforms.

- Strong experience in analyzing, fixing, and validating software security vulnerabilities reported by tools such as Coverity, Black Duck, Nessus, or similar static/dynamic scanners.

- Ability to debug and fix issues in protocol stack components, including memory corruption, buffer handling, race conditions, input validation, resource leaks, and unsafe API usage.

- Good understanding of secure coding practices, memory safety, multi-threading, IPC, Linux OS concepts, and performance-aware software design.

- Working knowledge of 4G/5G RAN stack architecture and protocol layers such as RRC, NGAP, XnAP, PDCP, RLC, MAC, or related stack components.

- Experience in tracing complex call flows, analyzing logs, reproducing defects, preparing patches, and ensuring fixes do not introduce regressions.

- Ability to handle security defects in legacy and production code while maintaining stability, scalability, and low-latency behavior of telecom software.

- Familiarity with build systems, CI/CD pipelines, code review practices, unit testing, and defect tracking tools.

- Good communication skills to work with security teams, stack developers, testers, architects, and release teams for timely vulnerability closure.

- Preferred: exposure to threat modelling, CVE analysis, SBOM/open-source vulnerability handling, hardening activities, and telecom security standards.