Staff Software Development Engineer

Fortinet•Sunnyvale, CA

2d•Onsite

About The Position

Fortinet is seeking an experienced Staff Software Development Engineer to join their team. This role involves developing and enhancing features in network security, particularly in areas like signature engine, header security, CSRF, WAF scripting, API security, and Bot mitigation. The engineer will also be responsible for improving debugging and unit testing tools, staying updated on web security events, and collaborating with Cloud, Intelligence, and Product Management teams to refine features, improve intelligence databases, and contribute to product roadmaps. The position requires a strong understanding of web security principles and the ability to research and implement new solutions.

Requirements

8+ years of relevant work experience.
Bachelors degree in Computer Science, Engineering or related technical program.
Proficient in C language, proficient in development tools and environments under Linux, such as gcc gdb libc, etc., able to understand GNU Makefile.
Solid knowledge of the HTTP/HTTPS/HTTP2 protocol.
Familiarity with network firewalls, IDS/IPS, VPN, SSL, WAF, ADC.
Experience with Linux systems and networking related troubleshooting.
Hands-on experience with developing in common web servers and proxies(like Nginx/Apache/Haproxy).
Understanding of Web technologies like HTML/CSS/Javascript/JSON/XML, and common Web security issues like OWASP top 10, including SQL injection, XSS, CSRF, MITM, DoS.
US citizenship is required.

Nice To Haves

Experience with popular security detecting, penetration testing, web crawling tools is a plus, like ModSecurity, Snort, Burp Suite, OWASP ZAP, Metasploit, Sqlmap, Selenium, Puppeteer, etc.
High self-learning abilities.

Responsibilities

Developing and enhancing features in signature engine, header security, CSRF, WAF scripting, API security, Bot mitigation.
Enhance debugging and unit testing tools for Web security features.
Keep abreast of the latest Web security events and provide expertise on Web security event response and internal training.
Work with the Cloud and Intelligence teams to improve the features and intelligence DB in cloud deployment, especially on false positive and evasion cases.
Work with the Product Management teams on the product roadmaps, new features design, and product certifications.
Work with R&D and QA throughout the product development lifecycle to deliver high quality features.
Research new technologies and common tools in the industry and be able to devise new solutions.