Product Security Compliance - Senior Security SW and System Engineer

HPE•Aguadilla, PR

46d•Hybrid

About The Position

As part of our HPE Operations Product Security Compliance Testing Lab the Senior Security Engineer will be responsible for the design, development and implementation of security solutions to enhance product security. Scope includes design, development of product security tests, and the development of automated solutions and tools to improve efficiency of testing processes.

Requirements

Bachelor's or Master's degree in Computer Science, Information Systems, or equivalent.
Typically 6-10 years experience.
Extensive experience with multiple software systems design tools and languages.
Excellent analytical and problem-solving skills.
Experience in overall architecture of software systems for products, solutions and IT systems.
Designing and integrating software systems running on multiple platform types into overall architecture.
In-depth Cyber and IT security knowledge.
Solid knowledge of security fundamentals and general security technologies, including: network security controls (firewalls, VPNs, IPSec, IDS/IPS), secure code, physical security, cryptography, authentication, identity management, network communication ports and protocols, etc.
Solid knowledge of Artificial Intelligence (AI) tools for process validation and improvements.
Experience in Penetration testing with tools.
Experience with Web Application Security Testing (Tools: Burp, ZAP etc.).
Experience with Vulnerability Assessment and Tools (nmap, Nexpose or Nessus, Fierce, Wireshark etc.)
Experience with encryption methods and their applications, including Post Quantum Cryptography (PQC)
Evaluating forms and processes for software systems testing and methodology, including writing and execution of test plans, debugging, and testing scripts and tools.
Excellent written and verbal communication skills; mastery in English and local language. Ability to effectively communicate product architectures, design proposals and negotiate options at senior management levels.
Agile Development: Participate in Agile methodologies, including sprint planning, daily stand-ups, and retrospectives.
Understanding of OWASP Top 10

Nice To Haves

Security Certifications: preferred (CVP, CISSP, CEH, CompTIA Security+, OSCP.)
Cloud Architectures
Cross Domain Knowledge
Design Thinking
Development Fundamentals
DevOps
Distributed Computing
Microservices Fluency
Full Stack Development
Security-First Mindset
Solutions Design
Testing & Automation
User Experience (UX)

Responsibilities

Leads multiple security and automation project teams of other software systems engineers and internal and outsourced development partners responsible for all stages of design and development for security solutions for complex products and platforms, including solution design, analysis, coding, testing, and integration.
Design, develop, test, and maintain robust, scalable, and high-quality security and software solutions.
Bring relevant subject matter expertise on application and systems security strategy, architecture and roadmaps, review application architectures, code and system services from a security perspective.
Manages and expands relationships with internal and outsourced development partners on software systems design and development.
Reviews and evaluates designs and project activities for compliance with secure systems design and development guidelines and standards; provides tangible feedback to improve product security and mitigate failure risk.
Provides security domain-specific expertise and overall software systems leadership and perspective to cross-organization projects, programs, and activities.
Direct and coordinate the implementation of test automation and other test tools (security)
Develop and utilize security metrics to assess security performance trends.
Drives innovation and integration of new technologies into projects and activities in the secure software systems design organization.
Provides guidance and mentoring to less-experienced staff members.