Principal Engineer - Cybersecurity R&D

HPE•San Juan, PR

5d•Hybrid

About The Position

This is an opportunity to provide technical leadership and help build a team that will operate at the frontier of cybersecurity, as part of the Junos Cybersecurity R&D organization in the HPE Networking business unit. The mission of Cybersecurity R&D is to collaborate across functions to build and sustain secure routers, switches, and firewalls running Junos OS and Junos OS Evolved. The organization spans cybersecurity domains with major responsibilities in the development of system security features, applied cryptography, supporting security certifications, and Secure Development Lifecycle (SDL) practices, including harnessing frontier AI models for vulnerability discovery and remediation.

Requirements

Bachelor's or Master's degree in Computer Science, Cybersecurity, or adjacent technical field of study.
Typically 10+ years experience.
Deep knowledge of the art and science of cybersecurity
Ability to improvise, adapt, and overcome in the face of quickly evolving cybersecurity challenges and strategies
Strong knowledge of networking, networking security protocols (TLS, SSH, IPsec), and cryptography as built into networking
Significant experience working in one or more programming languages: C preferred, Python; bonus points for Rust
Working experience driving product security certifications -- FIPS 140 and Common Criteria – from gap analysis, to product preparation, to pre-testing, to submission to third-party labs, to certificate award; ability to quickly ramp on on EU CRA
Working experience in harnessing AI systems for defensive security purposes including vulnerability discovery and management; understands the importance of AI governances and keeping the human-in-the-loop
Strong technical communication skills both verbal and written; ability to explain, persuade, and evangelize

Nice To Haves

Rust programming language experience

Responsibilities

Support security certifications including NIST FIPS 140, Common Criteria, and the European Union Cybersecurity Resilience Act (EUCRA)
Drives the development and enhancement of product security capabilities including certification gap analysis, risk-based threat modelling, static analysis of code, dynamic analysis of running network devices, penetration testing, hardware security assessments, and AI-enhanced vulnerability management
Continually identifies and evaluates new cybersecurity technologies and innovations that benefit product security posture and processes; works with other senior technical leaders and management to build out the cybersecurity roadmap, and then leads hands-on execution of the roadmap
Leverages recognized domain expertise and experience to influence decisions of key stakeholders including executives, engineering managers, platform teams, product line managers, and customers
Provides guidance and mentoring to less-experienced staff members; bootstraps excellence in cybersecurity design and development