Product Security Engineer on Red Hat's Resilient Development team ensuring the security posture of offerings. Engaging with engineering for secure development practices.
Responsibilities
Engage with Engineering teams to promote security-aware development of Red Hat technologies/solutions.
Understand current and emerging threats in the enterprise software product and service space.
Analyze complex software systems and identify potential weaknesses in their architecture.
Plan and carry out threat modeling activities, and realistic threat simulations across our offerings.
Consult with software developers and product teams on improved security architecture.
Ensure that product roadmaps and new features mitigate risk, adhere to security policies, and provide customers with minimal security risk.
Contribute to customer-facing security documentation, technical references, and other data as used by the Common Vulnerabilities and Exposures (CVE) pages.
Promote Red Hat Product Security efforts within the community and the greater public.
Requirements
Bachelor's degree in computer science/engineering or equivalent/relevant work experience.
Strong understanding of common security vulnerabilities, (e.g. OWASP Top Ten) including how to detect, demonstrate, mitigate and resolve them.
Good understanding of Linux security technologies and product security experience; for example: POSIX permissions, ACLs, SELinux; Seccomp, Linux namespaces and cgroups; Linux administrations related to security: secure boot, TPMs, trusted execution environment, Linux boot chain, virtualization, containers and hypervisor security.
Experience with one or more programming languages like Go, Python, C/C++, and a willingness to learn new ones.
Knowledge and experience with modern container orchestration systems: Kubernetes, Openshift; comfortable with container technologies.
Ability to work with minimal supervision, in a fast-paced environment with a multicultural team distributed across multiple countries and time zones.
Solid communication and negotiation skills.
Excellent collaboration skills and dedication as a teammate.
Benefits
Comprehensive medical, dental, and vision coverage
Flexible Spending Account - healthcare and dependent care
Health Savings Account - high deductible medical plan
Retirement 401(k) with employer match
Paid time off and holidays
Paid parental leave plans for all new parents
Leave benefits including disability, paid family medical leave, and paid military leave
Additional benefits including employee stock purchase plan, family planning reimbursement, tuition reimbursement, transportation expense account, employee assistance program, and more!
Professional focused on Cloud Security solutions and DevSecOps at innovative tech consulting firm Leega. Implementing security for AWS services and integrating security analysis tools.
Technicien d'installation de dispositifs antichute supervisant l'installation et la sécurité. Participer aux visites de chantier, préparer et gérer l'installation avec une autre personne.
IT Specialist ensuring smooth IT operations in a growing beauty company. Collaborate with external service providers and support internal teams with compliance and documentation.
Strategic leader focused on Cyber Security and Fraud analytics at Sun Life. Establishing centralized functions and driving proactive detection and response efforts.
Manager Infrastructure & Security driving IT infrastructure and security landscape for semiconductor firm. Collaborating with teams to build scalable systems and innovative security strategies.
Residential Security Agent managing physical security for clients in California and Nevada, ensuring compliance with safety protocols and quick response to emergencies.
Senior Cyber Security Consultant at HvS - Consulting focusing on ISMS development and team leadership. Engaging clients in ISO 27001 compliance and strategic cybersecurity improvements.