Principal Security Software Engineer

Hewlett Packard Enterprise; Cambridge; Hybrid; GBP 120,000 - 160,000; Full time

Benefits offered by this job

Ergonomic workspace

Well‑stocked kitchen

Job summary

Hewlett Packard Enterprise (HP Wolf Security) is seeking a Principal Security Software Engineer to lead improvements to secure software development practices in line with CRA requirements. You will drive threat modelling, secure-by-design initiatives, and vulnerability management across Windows/Linux components.

Join a highly skilled team focused on hardware-enforced protection, micro-virtualization, and scalable isolation technologies for enterprise-grade endpoint security.

Qualifications

• Significant experience building, securing, and maintaining production software, ideally endpoint, security, or systems software.
• Strong programming experience in C, C++, Rust, Python, PowerShell, or comparable languages.
• Experience developing software for Windows and/or Linux, including OS, virtualization, isolation, or other security-sensitive components.
• Strong experience with code review, debugging, unit and integration testing, and modern build, CI/CD, and release workflows.
• Practical experience selecting, integrating, configuring, or improving static analysis tools and resolving the issues they identify.
• Ability to work effectively in a complex codebase and drive improvements to software quality, reliability, and security.

Responsibilities

• Lead the definition and delivery of improvements to Wolf Security’s secure software development lifecycle in line with CRA expectations.
• Introduce better static analysis tools, improve their integration into development and build workflows, tune rules and policies, and help teams resolve the issues they identify.
• Establish approaches for triaging findings, managing false positives, tracking remediation, and measuring security improvement.
• Promote security-by-design and secure-by-default principles through threat modelling, design reviews, architectural guidance, and secure coding practices.
• Improve the identification, assessment, documentation, and remediation of vulnerabilities throughout the software development lifecycle.
• Provide technical leadership on complex security problems, make engineering trade-offs, and mentor engineers through constructive review.

Skills

C

C++

Rust

Python

PowerShell

Windows development

Linux development

Tools

Static analysis tools

Job description

Principal Security Software EngineerDescription -HP Wolf Security is transforming endpoint security through hardware-enforced protection, isolation technologies, and cloud-connected security services. Our solutions protect millions of users worldwide by integrating security directly into the hardware, firmware, and software of modern PCs.As part of the HP Wolf Security R&D organisation, you will help strengthen the security engineering practices that underpin our products, ensuring security is built into every stage of the software development lifecycle.We are looking for a Principal Security Software Engineer to lead improvements to Wolf Security's secure software development processes, helping the organisation meet the requirements of the European Union Cyber Resilience Act (CRA). This includes strengthening security-by-design, vulnerability management, software assurance, and the engineering evidence needed to demonstrate effective security controls. The role requires close collaboration with software engineering, product security, quality, and compliance teams.(see https://www.hpwolf.com/ )ResponsibilitiesLead the definition and delivery of improvements to Wolf Security’s secure software development lifecycle in line with CRA expectations.Introduce better static analysis tools, improve their integration into development and build workflows, tune rules and policies, and help teams resolve the issues they identify.Establish approaches for triaging findings, managing false positives, tracking remediation, and measuring security improvement.Promote security-by-design and secure-by-default principles through threat modelling, design reviews, architectural guidance, and secure coding practices.Improve the identification, assessment, documentation, and remediation of vulnerabilities throughout the software development lifecycle.Provide technical leadership on complex security problems, make engineering trade-offs, and mentor engineers through constructive review.What it's likeAs part of a highly skilled engineering team, you'll help solve complex technical challenges, scale our virtualization platform for future products, and shape the next generation of HP Wolf Security's isolation technology used by millions of endpoints worldwide.Job Requirements:Significant experience building, securing, and maintaining production software, ideally endpoint, security, or systems software.Strong programming experience in C, C++, Rust, Python, PowerShell, or comparable languages.Experience developing software for Windows and/or Linux, including operating-system, virtualisation, isolation, or other security-sensitive components.Strong experience with code review, debugging, unit and integration testing, and modern build, continuous integration, and release workflows.Practical experience selecting, integrating, configuring, or improving static analysis tools and resolving the issues they identify.Ability to work effectively in a complex codebase and drive improvements to software quality, reliability, and security.The following skills and attributes are a plus:Experience applying secure software development lifecycle practices, including threat modelling, secure design, vulnerability management, and release governance.Experience with vulnerability disclosure, severity assessment, remediation planning, and security updates.Experience leading technical initiatives and influencing teams without direct line-management authority.Excellent written and verbal communication skills, with a collaborative and pragmatic approach.Location & working modelThis role is based in HP’s Cambridge office under a hybrid working arrangement, with a minimum requirement to be onsite three days per week. As a people‑focused senior role, regular in‑person collaboration is encouraged.HP has invested in a new, modern site, including ergonomic workspaces and well stocked kitchen facilities that included a wide selection of coffee.About you:You’re out to reimagine and reinvent what’s possible- in your career as well as the world around you. So are we. We love taking on tough challenges, disrupting the status quo, and creating what’s next. We’re in search of talented people who are inspired by big challenges, driven to learn and grow, and dedicated to making a meaningful difference.Why join HP Wolf SecurityHP Wolf Security is central to HP’s strategy in the PC market, with security designed into hardware, firmware, and software. This integrated approach enables HP to differentiate through built‑in, enterprise‑grade protection and manageability. This role sits at the heart of that strategy, helping deliver the tools that allow customers to deploy, manage, and trust secure PCs at scale. The primary focus of the HP Wolf Security team is developing cyber security solutions to protect our customers devices and data. The digital threat landscape is ever-changing and as the cyber security industry reacts and adapts to changes, so too do the malware authors. Our unique micro-virtualization technology ensures that customers are protected from even the most bleeding edge cyber security threats. That micro-virtualization technology forms a key pillar in a wider cyber security suite that we're actively developing.Our history:Inspired by the isolation principles of traditional virtualization, our team known then as Bromium, created a game-changing technology called micro-virtualization to protect end users against advanced malware. Every task the user performs, such as opening a document or clicking on a link, is isolated in its own micro-VM, with access to just the resources required for that task, and existing just for the life of the task. Protection is thus provided through isolation, without relying on detection, hence reliably defending the user from polymorphic and even zero-day malware.Bromium was acquired by HP Inc on 19 September 2019 forming HP Wolf Security.For more information, visit our website: https://www.hp.com/uk-en/security/endpoint-security-solutions.html#LIpostJob -SoftwareSchedule -Full timeShift -No shift premium (United Kingdom)Travel -Relocation -Equal Opportunity Employer (EEO) -HP, Inc. provides equal employment opportunity to all employees and prospective employees, without regard to race, color, religion, sex, national origin, ancestry, citizenship, sexual orientation, age, disability, or status as a protected veteran, marital status, familial status, physical or mental disability, medical condition, pregnancy, genetic predisposition or carrier status, uniformed service status, political affiliation or any other characteristic protected by applicable national, federal, state, and local law(s).Please be assured that you will not be subject to any adverse treatment if you choose to disclose the information requested. This information is provided voluntarily. The information obtained will be kept in strict confidence.For more information, review HP’s EEO Policy or read about your rights as an applicant under the law here: “ Know Your Rights: Workplace Discrimination is Illegal \"