Description
We are seeking a Senior Engineer to provide technical leadership on a team operating at the frontier of cybersecurity as part of the Junos Cybersecurity R&D organization in the HPE Networking business unit.
The mission of Cybersecurity R&D is to collaborate across functions to build and sustain secure routers, switches, and firewalls running Junos OS and Junos OS Evolved.
Responsibilities:
- Support security certifications including NIST FIPS 140, Common Criteria, and the European Union Cybersecurity Resilience Act (EUCRA)
- Develop and enhance product security capabilities including certification gap analysis, risk-based threat modelling, static analysis of code, dynamic analysis of running network devices, penetration testing, hardware security assessments, and AI-enhanced vulnerability management
- Track new cybersecurity technologies and innovations that benefit product security posture and processes; work with other technical leaders and management to contribute to the cybersecurity roadmap, and lead hands-on execution of the roadmap
- Leverage domain expertise and experience to influence decisions of key stakeholders including engineering managers, platform teams, and product line managers
- Mentor less-experienced staff members; bootstrap excellence in cybersecurity design and development
Education and Experience Required:
- Bachelor’s or Master’s degree in Computer Science, Cybersecurity, or adjacent technical field of study
- Typically 6-10 years experience
Knowledge and Skills:
- Deep knowledge of the art and science of cybersecurity
- Ability to improvise, adapt, and overcome in the face of quickly evolving cybersecurity challenges and strategies
- Strong knowledge of networking, networking security protocols (TLS, SSH, IPsec), and cryptography as built into networking products
- Significant experience working in one or more programming languages: C preferred, Python; bonus points for Rust
- Working experience driving product security certifications -- FIPS 140 and Common Criteria – from gap analysis, to product preparation, to pre-testing, to submission to third-party labs, to certificate award; ability to quickly ramp on EU CRA
- Working experience in harnessing AI systems for defensive security purposes including vulnerability discovery and management; understands the importance of AI governances and keeping the human-in-the-loop
- Strong technical communication skills both verbal and written; ability to explain, persuade, and evangelize