Principal Engineer - Cybersecurity R&D

Description

The company is an edge-to-cloud business that helps customers connect, protect, analyze and act on their data and applications.

This is a technical leadership role in a team working at the leading edge of cybersecurity. The team sits in the Cybersecurity R&D group within the networking business unit.

The group builds and maintains secure routers, switches and firewalls, along with the operating systems that run them. Its work covers system security features, applied cryptography, security certifications, and Secure Development Lifecycle practices, including using advanced AI models to find and fix vulnerabilities.

Job level: TCP05. Function: Engineering.

Responsibilities

• Help maintain security certifications under NIST FIPS 140, Common Criteria, and the EU Cybersecurity Resilience Act (EUCRA).
• Lead the building and improving of product security capabilities, including certification gap analysis, risk-based threat modelling, static and dynamic analysis of running devices, penetration testing, hardware security assessments, and AI-assisted vulnerability management.
• Track new cybersecurity technologies and methods that could strengthen product security and processes. Work with senior technical leaders and management to shape the cybersecurity roadmap, then lead the hands-on delivery of it.
• Apply your domain expertise to influence decisions made by executives, engineering managers, platform teams, product line managers, and customers.
• Guide and mentor less experienced staff, and raise the standard of cybersecurity design and development across the team.

Requirements

• A bachelor's or master's degree in computer science, cybersecurity, or a closely related technical field.
• Typically 10+ years of experience.
• Deep knowledge of cybersecurity, both its principles and its practice.
• Ability to improvise, adapt and overcome as cybersecurity threats and strategies change quickly.
• Strong understanding of networking, network security protocols (TLS, SSH, IPsec), and the cryptography built into networking.
• Substantial experience programming in one or more languages, with C preferred and Python also needed.
• Nice to have: Rust.
• Hands-on experience taking products through FIPS 140 and Common Criteria certification, from gap analysis and preparation through pre-testing, submission to third-party labs, and certificate award.
• Ability to get up to speed quickly on the EU CRA.
• Practical experience using AI systems for defensive security, including vulnerability discovery and management. You understand the need for AI governance and for keeping a human in the loop.
• Strong written and verbal communication skills. You can explain complex ideas, persuade others, and build support for them.

Conditions

This is a hybrid role, with an average of 2 days per week in a company office.

Relocation support is available for eligible candidates.

The listed location for this role is Puerto Rico.

Accommodations are available during the application and interview process on request.

The company is an equal opportunity employer and makes hiring decisions based on qualifications, merit and business need, and it complies with laws on the use of criminal records in hiring.

Benefits

• Comprehensive health and wellbeing benefits covering physical, financial and emotional health for employees and their families.
• Career development programs that help you become a subject expert in your field or move into another division.