Designation :

Senior Lead Engineer Hybrid (Product Security Incident Response Team (PSIRT))

Details Information

Reporting to Senior Tech Manager

Location : Pune

Experience (in years) Minimum 7+ years

Number of vacancies 1

Role & Responsibility :

- And become an employer of choice by being employee first in all processes and practices.

- Investigate, track and remediate known vulnerabilities (CVEs - Common Vulnerabilities and Exposures).

- Work closely with Development, QA and sustaining teams to drive issues to closure.

- Track and report on remediation efforts. Actively hunt for issues in published security bulletin and perform penetration tests. Hardening existing product security programs.

- Respond to and manage customer-impacting security events and findings.

- Perform variant analysis and root cause analysis to find systematic bugs.

- Triage issues, quantitatively evaluate risk and provide analysis to engineering teams regarding the impact of security issues using industry standard metrics such as the Common Vulnerability Scoring System (CVSS).

- Investigate, track and remediate vulnerabilities and work with QA for through validation.

- Track and report on remediation efforts. Work with the Security Response manager to release public security bulletins.

- Implement software algorithms and code efficiently in the C/C++ programming environment with multi-threading, multi-core, and real-time embedded high availability operating system such as Linux, RTOS or similar OS.

- Unit test and debug code as necessary to ensure implementation correctness and quality.

- Document code appropriately with comments and work with the product documentation team to develop and review user documentation.

- Use a source control system such as Git/CVS to store developed code.

- Provide engineering support to the technical support team to address any customer reported issues. Communicate with team members and report weekly on project progress.

Primary Skills :

- Strong hands-on C/C++/Python programming and debugging skills.

- Knowledge on openSSL and Cryptography.

- Deep knowledge of Linux kernel internals, drivers and Linux system.

- Worked on Product Security Vulnerabilities and attack/defense methodologies

- Experience in software development with high performance networking devices

- Relevant industry standard Security certifications

- Knowledge of the security research community is a strong plus.

- Proven ability to build relationships and influence individuals at all levels

- Control plane and data plane architecture in networking devices

Secondary skills :

- Familiar with Git and agile development process.

- Experience with one of the following; AWS, Azure, ESXi, KVM, or Hyper-V is a plus.

Educational/professional qualification required :

- Bachelors in computer engineering or equivalent.

- Preferably masters degree in computer Engineering, Or Equivalent.

Soft skills/competencies :

- Problem solving mind and attitude