Senior Engineer – Cybersecurity R&D

Description

This is a hybrid role that requires about 2 days per week in an HPE office.

You will provide technical leadership on the cybersecurity research and development group in the networking business unit, which builds secure routers, switches and firewalls for the company's network operating systems.

The group covers system security features, applied cryptography, security certifications, and secure development practices, including using advanced AI models to find and fix vulnerabilities.

Job level TCP04, in the Engineering function.

Responsibilities

• Support product security certifications under NIST FIPS 140, Common Criteria, and the EU Cybersecurity Resilience Act (EUCRA).
• Build and improve product security work, including certification gap analysis, risk-based threat modelling, static and dynamic analysis of code and running devices, penetration testing, hardware security assessments, and AI-assisted vulnerability management.
• Follow new cybersecurity technologies that could strengthen product security, help shape the cybersecurity roadmap with other technical leaders and management, and then carry out that roadmap hands-on.
• Use your expertise to influence engineering managers, platform teams, and product line managers on key decisions.
• Coach less-experienced staff and help raise the standard of security design and development across the team.

Requirements

• A bachelor's or master's degree in computer science, cybersecurity, or a closely related technical field.
• Typically 6 to 10 years of experience.
• Deep knowledge of cybersecurity, both principles and practice.
• Ability to adapt and find solutions quickly as cybersecurity threats and methods change.
• Strong knowledge of networking, network security protocols (TLS, SSH, IPsec), and cryptography as implemented in networking products.
• Significant experience programming in one or more languages. C is preferred, and Python is also needed.
• Hands-on experience taking products through FIPS 140 and Common Criteria certification, from gap analysis and preparation through pre-testing, submission to third-party labs, and certificate award.
• Ability to get up to speed quickly on the EU CRA.
• Experience using AI systems for defensive security, including vulnerability discovery and management, and an understanding of AI governance and keeping humans in the loop.
• Strong written and verbal communication skills, with the ability to explain, persuade, and win people over.
• Bonus: experience with Rust.

Conditions

Hybrid work, with about 2 days per week in an HPE office.

Relocation support is available for eligible candidates.

Location: Puerto Rico.

Accommodations are available during the application and interview process; request them through the company's secure form.

The company is an equal opportunity employer and makes hiring decisions based on qualifications, merit, and business need.

Benefits

• Comprehensive health and wellbeing benefits covering physical, financial, and emotional wellbeing.
• Career development programs, including paths to become a subject expert or move into another division.
• A culture that values varied backgrounds and offers flexibility in managing work and personal needs.