Senior Software Engineer, Services Security

HP IQ•San Francisco, CA

1d•$230,000 - $288,000

About The Position

As a Senior Software Engineer specializing in Services Security, you will play a key role in helping HP IQ lead the industry in advancing the security of cloud services, and empowering users with control of their privacy and personal data in the quickly evolving AI-driven world. Privacy and security are table stakes at HP IQ, and absolutely integral to our success as a dynamic company with a deep commitment to product. You will own projects through their entire life cycle, building secure systems for our cloud services by threat modeling, designing secure architectures, and implementing them. This role focuses on designing and implementing services that balance privacy and security with user experience, while scaling to support anywhere from 10 to 10 million concurrent users! The technology that you will create will maintain and strengthen the trust that HP IQ promises to our users.

Requirements

6+ years of experience in secure programming in cloud-native environments, primarily in Java.
Deep understanding of (OR deep desire to learn) cryptography, security, and privacy theory and practices.
Breadth of experience in product development and a holistic approach to problem solving.
Demonstrated ability to architect and lead multi-disciplinary projects from concept to deployment.
Ability to work closely with cross-functional teams to assess attack surface and threat models across many different features.
Proactive approach to product development – you see a need and you jump in to make it happen.
Strong communication skills with the ability to ask for help when needed, defend opinions, give and accept feedback, and accept ideas and solutions from others.

Nice To Haves

Familiarity with authentication and authorization protocols (OAuth, SSO, OPAQUE, etc.)
Experience deploying and maintaining cloud-based cryptographic systems (KMS, HSM, etc.)
Networking protocols (gRPC, mTLS, https, etc.)
Experience building services in kubernetes environments
Familiarity with multiple cloud providers (AWS, Azure, Google Cloud)

Responsibilities

Lead the design and implementation of cloud services security architecture from the ground up. This includes using the best industry standard cryptography practices for things like secure key management systems, PKI, crypto services, privacy services, etc.
Collaborate cross-functionally with the Cloud Services, AI Services, Web, Design, and Device Experience teams to create robust security features.
Design services to empower users to make informed security and privacy decisions for their own personal data.
Work on high-profile projects, such as secure backup and restore systems, that require secure and efficient data handling.
Assist in vulnerability management and apply secure coding practices across the company and development lifecycle.