Description
We are seeking a Principal Engineer to provide technical leadership and help build a team that will operate at the frontier of cybersecurity, as part of the Junos Cybersecurity R&D organization in the HPE Networking business unit.
The mission of Cybersecurity R&D is to collaborate across functions to build and sustain secure routers, switches, and firewalls running Junos OS and Junos OS Evolved.
Responsibilities:
- Support security certifications including NIST FIPS 140, Common Criteria, and the European Union Cybersecurity Resilience Act (EUCRA)
- Drive the development and enhancement of product security capabilities including certification gap analysis, risk-based threat modelling, static analysis of code, dynamic analysis of running network devices, penetration testing, hardware security assessments, and AI-enhanced vulnerability management
- Continually identify and evaluate new cybersecurity technologies and innovations that benefit product security posture and processes; work with other senior technical leaders and management to build out the cybersecurity roadmap, and then lead hands-on execution of the roadmap
- Leverage recognized domain expertise and experience to influence decisions of key stakeholders including executives, engineering managers, platform teams, product line managers, and customers
- Provide guidance and mentoring to less-experienced staff members; bootstrap excellence in cybersecurity design and development
Education and Experience Required:
- Bachelor's or Master's degree in Computer Science, Cybersecurity, or adjacent technical field of study
- Typically 10+ years experience
Knowledge and Skills:
- Deep knowledge of the art and science of cybersecurity
- Ability to improvise, adapt, and overcome in the face of quickly evolving cybersecurity challenges and strategies
- Strong knowledge of networking, networking security protocols (TLS, SSH, IPsec), and cryptography as built into networking
- Significant experience working in one or more programming languages: C preferred, Python; bonus points for Rust
- Working experience driving product security certifications -- FIPS 140 and Common Criteria – from gap analysis, to product preparation, to pre-testing, to submission to third-party labs, to certificate award; ability to quickly ramp on EU CRA
- Working experience in harnessing AI systems for defensive security purposes including vulnerability discovery and management; understands the importance of AI governances and keeping the human-in-the-loop
- Strong technical communication skills both verbal and written; ability to explain, persuade, and evangelize