Engineer II – Cybersecurity R&D

Description

The role is hybrid, with an average of 2 days per week in a company office.

The company is a global edge-to-cloud business that helps customers connect, protect and analyze their data and applications.

You would join the cybersecurity research and development group in the networking business unit, which builds secure routers, switches and firewalls running the company's network operating systems.

The group covers system security features, applied cryptography, security certifications and secure development practices, including using advanced AI models to find and fix vulnerabilities.

Responsibilities

• Support certification work for NIST FIPS 140, Common Criteria and the EU Cybersecurity Resilience Act (EUCRA).
• Build and improve product security through certification gap analysis, risk-based threat modelling, analysis of source code and of devices in operation, penetration testing, hardware security assessment and AI-assisted vulnerability management.
• Track new cybersecurity technologies and methods that strengthen product security, and understand the cybersecurity roadmap before carrying it out.
• Build domain expertise over time so you can advise engineering managers, platform teams and product line managers.
• Aim for high standards in cybersecurity design and development.

Requirements

• A bachelor's or master's degree in computer science, cybersecurity or a closely related technical field.
• Typically 2-3 years of experience.
• Working knowledge of cybersecurity as both a discipline and a craft.
• Able to adapt and push through when cybersecurity challenges and tactics change quickly.
• Basic knowledge of networking, security protocols such as TLS, SSH and IPsec, and cryptography as used in networking products.
• Some experience with C (preferred) and Python.
• Bonus: experience with Rust.
• Familiarity with FIPS 140 and Common Criteria certification, from gap analysis and product preparation through pre-testing, submission to third-party labs and certificate award.
• Ability to get up to speed quickly on the EU CRA.
• Hands-on experience using AI systems for defensive security, including vulnerability discovery and management, and an understanding of AI governance and keeping a human in the loop.
• Basic verbal and written technical communication, including discussing design proposals and implementation.

Conditions

Hybrid work with an average of 2 days per week in an office.

Relocation support can be offered to eligible candidates.

Job level: TCP02. Function: Engineering. Listed location: Puerto Rico.

The company is an equal opportunity employer, including for veterans, people with disabilities and LGBT candidates, and makes decisions based on qualifications, merit and business need.

Benefits

• Health and wellbeing benefits covering physical, financial and emotional health for team members and their families.
• Development programs to help you reach career goals, such as becoming a subject expert or moving into another division.
• Flexibility to manage work and personal needs.