Description
This is an opportunity to join a dynamic team that operates at the frontier of cybersecurity, as part of the Junos Cybersecurity R&D organization in the HPE Networking business unit.
The mission of Cybersecurity R&D is to collaborate across functions to build and sustain secure routers, switches, and firewalls running Junos OS and Junos OS Evolved.
Responsibilities:
- Support security certifications including NIST FIPS 140, Common Criteria, and the European Union Cybersecurity Resilience Act (EUCRA)
- Develop and enhance product security capabilities including certification gap analysis, risk-based threat modelling, static analysis of code, dynamic analysis of running network devices, penetration testing, hardware security assessments, and AI-enhanced vulnerability management
- Adopt new cybersecurity technologies and innovations that benefit product security posture and processes; understand the cybersecurity roadmap, and execute the roadmap
- Continually gain domain experience to provide consulting to key stakeholders including engineering managers, platform teams, and product line managers
- Pursue excellence in cybersecurity design and development
Education and Experience Required:
- Bachelor’s or Master’s degree in Computer Science, Cybersecurity, or adjacent technical field of study
- Typically 2-3 years experience
Knowledge and Skills:
- Working knowledge of the art and science of cybersecurity
- Ability to improvise, adapt, and overcome in the face of quickly evolving cybersecurity challenges and strategies
- Basic knowledge of networking, networking security protocols (TLS, SSH, IPsec), and cryptography as built into networking products
- Some experience working in one or more programming languages: C preferred, Python; bonus points for Rust
- Familiarity with product security certifications -- FIPS 140 and Common Criteria – from gap analysis, to product preparation, to pre-testing, to submission to third-party labs, to certificate award; ability to quickly ramp on EU CRA
- Working experience in harnessing AI systems for defensive security purposes including vulnerability discovery and management; understand the importance of AI governance and keeping the human-in-the-loop
- Basic technical communication skills both verbal and written; ability to discuss design proposals and implementation