Lead Security Engineer

About the job
In this role, you will provide software security test quality assurance support to software development teams. This position ensures that software scrum teams follow the defined software security development lifecycle process and comply with related regulations and industry standards. As a member of the software test & QA department, you will work with the team to implement continuous improvement in the software security process, monitor the health of implemented software systems, and provide guidance to scrum teams. You will be responsible for ensuring compliance with software security quality policies and procedures.
We work in a supportive environment where the team embraces new techniques to improve itself and grow capability. We’re looking for someone who shares this ethic and expresses a desire to develop security test strategies across different platforms (Lighting, Environmental, Hair, and Robotics). You must be aware of software verification methodologies and techniques, ideally with a background in security testing, and be comfortable with high-level design discussions with developers.

Key Responsibilities

• Implement testing and operate advanced software security techniques in compliance with technical reference architecture.
• Perform ongoing software security penetration testing, and code review activities to improve software security, both automated and manual, to identify and exploit vulnerabilities in IoT consumer products.
• Define penetration testing methodologies with a combination of automated and manual tools.
• Agree on the desired security level with the organization, reviewing requirements to build tests.
• Build automated systems to support continuous testing and analysis of nightly builds.
• Contribute to the design, development, implementation, and integration of Offensive Cyber Operations tools against platforms, payloads, and systems.
• Proactively identify security risks and provide engineering designs for new software solutions to help mitigate security vulnerabilities.
• Work in a SAFe Agile team across a global organization.
• Consult team members on software secure coding practices.
• Develop a familiarity with new tools and best practices.

Qualifications, Skills And Behaviours

• Experience in cybersecurity, including penetration testing, security posture assessment, cloud security assessment, IoT security, vulnerability analysis, and risk assessment.
• Experience using scan/attack/assess tools and techniques.
• Competency in at least one scripting or coding language (Python, C, C++).
• In-depth knowledge of wireless protocols (Wi-Fi, Bluetooth, JTAG, and USB).
• Proficiency in security concepts for IoT, Linux, and RTOS Operating Systems.
• Experience with Test Management Systems (Jira, Confluence, Stash, Git, Bamboo).
• Ability to provide critical input at all design and development stages of new features.
• Persistent nature, inquisitive attitude, and results-driven approach.
• Creative and product-focused ability to generate numerous concepts for new technologies.
• More than 3 years of software quality or software test relevant experience.
• Bachelor’s Degree in Computer Engineering, Electronic Engineering, or related fields.
• Knowledge of software in IoT products, such as embedded, app, and cloud.
• Experience in a regulated environment (ISO, IEC, FDA standards).
• Experience working with Agile software development and DevOps environments.
• Excellent attention to detail, strong communication skills, and ability to work independently and in teams.
• Able to work in a fast-paced environment and deliver quality under minimal supervision.
• Understanding of the software security development lifecycle.
• Good understanding of statistical process control, including selecting, defining, and applying product and process metrics and analytical techniques, and communicating results.
• Advanced CREST certification.