Sorry, this listing is no longer accepting applications. Don’t worry, we have more awesome opportunities and internships for you.

Senior Security Engineer

Qualigence, Inc.

Senior Security Engineer

San Francisco, CA
Full Time
Paid
  • Responsibilities

    The Senior Security Engineer will have experience in DEVICE side security and  be a member of the Video Collaboration team creating video conferencing products.

    Who you are:

    • Device Security experience REQUIRED
    • This person should have Embedded Systems/IoT experience, and be able to take the software or systems architecture to assess devices for security threats.
    • There will be some element of penetration testing done by this person, i.e. they will require some “hacker skills” towards hardware/software.
    • They will need to understand entrypoints, authentication of packets, http proxys, DDOS, etc. (i.e. where is the system/device vulnerable).
    • They will conduct architecture review with engineers and determine if the code needs mitigations or if it can’t be mitigated.
    • This person is more of a practitioner than a teacher.
    • They are not a coder per se but would have been a software engineer in previous experience, someone who would have loved security.
    • This person will have some understanding of protocols on embedded Android or Linux systems (Android is preferred). There will be some scripting to the extent of creating small scripts or programs to hack or assess a system.

    Your contribution:

    • You will work as part of the System Engineering team help prototype and define future products and drive them into production
    • You will help help define new product architectures and evaluate new HW technologies
    • You will work cross functionally with the FW, SW, and EE teams to drive architectural definition and resolve related issues

    Key Qualifications:

    • 4 Years of experience of product-level security testing and code-level auditing
    • At least a Bachelors degree in one or more of these Engineering fields: Electrical, Electronics, Telecommunications or Computer Science
    • Programming experience in C, C++, Java, Python and Kotlin
    • Experience with creating threat models, analyze attack vectors based on high-level software design and architecture
    • Experience running internal and external penetration testing for IoT devices running Embedded Linux or Android
    • Experience software hardening on Embedded Linux and/or Android products, vulnerability management, including creating incidence response plan
    • Experience with SELinux, Secure Boot and Signed Builds
    • In-depth technical knowledge of security engineering, computer and network security, authentication, security protocols and applied cryptography
    • Excellent verbal & written communication and interpersonal skills

    Preferred Qualifications:

    • Prior experience as a developer on an Embedded Linux/Android platforms
    • Experience on hardware security fundamentals
    • Good understanding of Hardware Security Modules (HSM) and ARM Trustzone
    • Experience integrating security patches for Linux kernel on IoT devices (Linux/Android)

    Education:

    • B.S, M.S. or Ph.D. in Electrical Engineering, Computer Science, or a related field