Linux Security Engineer

Lenovo; Indaiatuba; Híbrido; BRL 120 000 - 240 000; Tempo integral

Resumo da oferta

Lenovo Brazil seeks a Linux Security Engineer to join the Global Security Lab and help secure Lenovo’s PC and software portfolio across our global and Brazilian teams.

The role requires a strong development background, English fluency, and a hybrid schedule (3 days on-site, 2 days remote) to collaborate with engineers and security teams. You will drive secure development practices and assess security of Linux applications.

Qualificações

• Bachelor’s degree in Computer Science, Computer Engineering, or related field with 2+ years relevant experience; or master’s degree with 1+ years relevant experience; or equivalent experience.
• Fluency in English language.
• Availability to work in a hybrid schedule: 3 days on-site and 2 days remote.

Responsabilidades

• Evaluating the security of product architecture proposals, driving security requirements, and logging concerns.
• Assessing the security posture of Lenovo and 3rd party developed applications for Linux
• Using security static and dynamic analysis tooling to review and test applications, and interpreting results.
• Performing source code reviews ensuring that Secure Development Lifecycle and secure development best practices are followed.
• Presenting products for approval by the Security Review Board.
• Acting as a Secure Development Lifecycle evangelist, disseminating knowledge related to product and infrastructure security.
• Supporting the preparation and creation of infrastructure for projects to be developed
• Supporting cybersecurity environments used by Lenovo Brazil partners.

Conhecimentos

English fluency

Formação académica

Bachelor’s degree in Computer Science or related field

Master’s degree in Computer Science or related field

Ferramentas

C

C++

Python

Bash scripting

Descrição da oferta de emprego

We are Lenovo. We do what we say. We own what we do. We WOW our customers.

Lenovo is a US$83 billion revenue global technology powerhouse, ranked #153 in the Fortune Global 500, and serving millions of customers every day in 180 markets. Focused on a bold vision to deliver Smarter Technology for All, Lenovo has built on its success as the world’s largest PC company with a full-stack portfolio of AI-enabled, AI-ready, and AI-optimized devices (PCs, workstations, smartphones, tablets), infrastructure (server, storage, edge, high performance computing and software defined infrastructure), software, solutions, and services. Lenovo’s continued investment in world-changing innovation is building a more equitable, trustworthy, and smarter future for everyone, everywhere. Lenovo is listed on the Hong Kong stock exchange under Lenovo Group Limited (HKSE: 992) (ADR: LNVGY).

This transformation together with Lenovo’s world-changing innovation is building a more inclusive, trustworthy, and smarter future for everyone, everywhere. To find out more visit www.lenovo.com , and read about the latest news via our StoryHub .

Description and Requirements

Overall Description: The security threat landscape presents a wide range of risks to the solutions offered by Lenovo’s Personal Computing Smart Devices organization – from the Cloud, to PCs, IoT devices, mobile applications, and Augmented and Virtual Reality devices. As a Linux Security Engineer, you will join Lenovo’s Global Security Lab as a member of our product security team. This team is responsible for ensuring Lenovo’s PC SD diverse product and technology portfolio is designed, developed, and delivered securely for our customers.

Practical experience is critical for effectively driving secure development practices. An understanding of the product development process is key to effectively influence the practices, behaviors and understanding of developers. Therefore, candidates with strong development backgrounds who have developed product security knowledge, training and experience will be given highest consideration.

• Evaluating the security of product architecture proposals, driving security requirements, and logging concerns.
• Assessing the security posture of Lenovo and 3rd party developed applications for Linux
• Using security static and dynamic analysis tooling to review and test applications, and interpreting results.
• Performing source code reviews ensuring that Secure Development Lifecycle and secure development best practices are followed.
• Presenting products for approval by the Security Review Board.
• Acting as a Secure Development Lifecycle evangelist, disseminating knowledge related to product and infrastructure security.
• Supporting the preparation and creation of infrastructure for projects to be developed
• Supporting cybersecurity environments used by Lenovo Brazil partners.
• Bachelor’s degree in Computer Science, Computer Engineering, or related field with 2+ years relevant experience; or master’s degree with 1+ years relevant experience; or equivalent experience.
• Fluency in English language.
• Availability to work in a hybrid schedule: 3 days on-site and 2 days remote.

Preferred Qualifications (considered a Plus):

• Experience in developing applications Linux using programming languages, such as C, C++, Python, and Bash scripting.
• Experience with application debug and pen testing and related tools.
• Active general industry knowledge of the latest application vulnerabilities and exploits.
• Understanding of general secure development practices: code review, static analysis, OWASP, etc.
• General knowledge of cryptography concepts such as hash functions and symmetric/asymmetric encryption.
• An understanding and ability to communicate the tactics, techniques, and procedures of an attacker.
• Strong written and verbal communication skills – this role requires communicating with and influencing engineers and managers, as well as communicating with diverse and global teams.
• Experience with the application of threat modeling or other risk identification techniques.
• Detailed knowledge of security vulnerabilities and remediation techniques.

The role is open to candidates based at either of Lenovo’s locations in Brazil:

Candidates may be hired from either location, as both sites are eligible for this position.

We believe in treating each other with respect and dignity. We judge all applicants and employees by their qualifications, demonstrated skills and achievements without regard to race, color, religion, gender, gender identity or expression, national origin, ethnicity, sexual orientation, sex, age, disability, veteran status, marital status or any other characteristic protected by local law. When necessary, Lenovo will provide reasonable accommodations for employees with disabilities or those with special religious requirements. All employees help to create a positive work environment by adhering to these standards.

If you require an accommodation to complete this application, please [e-mail]