Description
This is an opportunity to join a dynamic team that operates at the frontier of cybersecurity, as part of the Junos Cybersecurity R&D organization in the HPE Networking business unit.
The mission of Cybersecurity R&D is to collaborate across functions to build and sustain secure routers, switches, and firewalls running Junos OS and Junos OS Evolved. The organization spans cybersecurity domains with major responsibilities in the development of system security features, applied cryptography, supporting security certifications, and Secure Development Lifecycle (SDL) practices, including harnessing frontier AI models for vulnerability discovery and remediation.
Responsibilities:
- Support security certifications including NIST FIPS 140, Common Criteria, and the European Union Cybersecurity Resilience Act (EUCRA)
- Develops and enhances product security capabilities including certification gap analysis, risk-based threat modelling, static analysis of code, dynamic analysis of running network devices, penetration testing, hardware security assessments, and AI-enhanced vulnerability management
- Adopts new cybersecurity technologies and innovations that benefit product security posture and processes; understands the cybersecurity roadmap, and then executes the roadmap
- Continually gains domain experience to provide consulting to key stakeholders including engineering managers, platform teams, and product line managers
- Pursues excellence in cybersecurity design and development
Education and Experience Required:
- Bachelor’s or Master’s degree in Computer Science, Cybersecurity, or adjacent technical field of study
- Typically 2-3 years experience
Knowledge and Skills:
- Working knowledge of the art and science of cybersecurity
- Ability to improvise, adapt, and overcome in the face of quickly evolving cybersecurity challenges and strategies
- Basic knowledge of networking, networking security protocols (TLS, SSH, IPsec), and cryptography as built into networking products
- Some experience working in one or more programming languages: C preferred, Python; bonus points for Rust
- Familiarity with product security certifications -- FIPS 140 and Common Criteria – from gap analysis, to product preparation, to pre-testing, to submission to third-party labs, to certificate award; ability to quickly ramp on EU CRA
- Working experience in harnessing AI systems for defensive security purposes including vulnerability discovery and management; understands the importance of AI governance and keeping the human-in-the-loop
- Basic technical communication skills both verbal and written; ability to discuss design proposals and implementation