System Platform Developer

Investigate, track and remediate known vulnerabilities (CVEs - Common Vulnerabilities and Exposures). Work closely with Development, QA and sustaining teams to drive issues to closure. Track and report on remediation efforts. Actively hunt for issues in published security bulletin and perform penetration tests. Hardening existing product security programs.

Respond to and manage customer-impacting security events and findings. Perform variant analysis and root cause analysis to find systematic bugs. Triage issues, quantitatively evaluate risk and provide analysis to engineering teams regarding the impact of security issues using industry standard metrics such as the Common Vulnerability Scoring System (CVSS). Investigate, track and remediate vulnerabilities and work with QA for through validation. Track and report on remediation efforts. Work with the Security Response manager to release public security bulletins.

Implement software algorithms and code efficiently in the C/C++ programming environment with multi-threading, multi-core, and real-time embedded high availability operating system such as Linux, RTOS or similar OS. Unit test and debug code as necessary to ensure implementation correctness and quality. Document code appropriately with comments and work with the product documentation team to develop and review user documentation. Use a source control system such as Git/CVS to store developed code. Provide engineering support to the technical support team to address any customer reported issues. Communicate with team members and report weekly on project progress.

Primary Skills

 

 

 

• Strong hands-on C/C++/Python programming and debugging skills.

• Knowledge on openSSL and Cryptography.

• Deep knowledge of Linux kernel internals, drivers and Linux system.

• Worked on Product Security Vulnerabilities and attack/defense methodologies

Secondary skills

 

  ·      Familiar with Git and agile development process.

·      Experience with one of the following; AWS, Azure, ESXi, KVM, or Hyper-V is a plus.