Senior Engineer - Product Security

Aptiv; Periyapatna; Hybrid; INR 900,000 - 1,500,000; Full time

Benefits offered by this job

Hybrid work model

Health, dental, life insurance

Disability coverage

RRSP matching

Flexible time-off

Learning benefits

Job summary

Wind River is seeking a Security Engineer to secure cloud-native and hybrid environments. You will collaborate with product engineering, software development, QA, and customer-facing teams to implement secure infrastructure and security controls.

Candidates should have 3-5 years in IT security, strong cloud/IAC skills, and DevSecOps expertise. You’ll work on Python tooling, security automation, and vulnerability management in a hybrid work setting with global teams.

Qualifications

• 3-5 years of IT security experience.
• Proficient in public cloud management leveraging IAC.
• Strong understanding of DevSecOps technologies.

Responsibilities

• AWS and Azure native services experience.
• Secure on-prem and cloud using IAC and policy as code.
• Application, API security and pen testing.
• Knowledge of Coverity, BurpSuite, Trivy, Prisma Cloud, Tenable, CrowdStrike.
• Container and cluster hardening.
• Python programming.
• Pipeline automation on GitLab, Jenkins, Jira.
• Vulnerability management and remediation.
• Proactive and adaptable with a willingness to learn.

Skills

AWS

Azure

DevSecOps

Python

IAC

GitLab

Jenkins

Container security

Education

Bachelor's in Computer Science or related

Tools

Coverity

BurpSuite

Trivy

Prisma Cloud

Tenable

CrowdStrike

Job description

About Wind River

Wind River is a global leader in delivering software for mission-critical intelligent systems. For more than four decades, the company has been an innovator and pioneer, powering billions of systems that require the highest levels of security, safety, and reliability.

Wind River helps customers across automotive, aerospace, defense, industrial, medical, and telecommunications industries solve complex technology challenges on their journey toward the new intelligent machine economy. The company’s software powers generation after generation of the safest, most secure systems in the world. Examples include playing a key role in NASA space missions such as Artemis I, the James Webb Space Telescope, and multiple Mars rovers. We’ve achieved recent 5G milestones including the world’s first successful 5G data session with Verizon and building one of the largest Open RAN networks in the world with Vodafone.

The company has received industry recognition for its technology innovation and leadership, and for its workplace culture, including global Great Place to Work certification and being named a “Top Workplace” for ten consecutive years. If you want to be part of a unique culture where the lived experience is based on our cultural attributes of growth mindset, customer-focus, and diversity, equity, inclusion & belonging, come join us and help advance the future software defined world.

YOUR ROLE

As a Security Engineer at Wind River, you will play a pivotal role in our mission. You’ll work closely with Product Engineering, Software Development, QA, and our customer-facing teams to ensure requisite levels of infrastructure, applications, and software security. Collaboration and teamwork are key, as you'll actively participate in global projects, working with colleagues from around the world. Your responsibilities will span from providing secure by-design hybrid infrastructure and security controls implementation for cloud-native solutions. To succeed in this role, you should have 3-5 years of IT security experience, be proficient in public cloud management leveraging IAC, and possess a strong understanding of DevSecOps technologies, pioneering new security tools, processes and capabilities for cloud-native solutions. A proactive mindset, solid technical skills, and the ability to work autonomously are essential.

What You’ll Do

• Deep understanding and hands-on experience in AWS and Azure native services
• Secure OnPrem and Public Cloud environments leveraging IAC and policy as code
• Practical hands-on application security, API security and Penetration testing
• Good understanding of security tools Coverity, BurpSuite, Trivy, Prisma Cloud , Tenable, CrowdStrike etc.
• Working experience in container and cluster hardening
• Excellent programming skills using Python
• Proficiency in pipeline automation leveraging Gitlab, Jenkins, Jira etc.
• Strong foundation of vulnerability management, remediation, and troubleshooting skills
• Proactive and adaptable with a willingness to learn

Education & Experience

• Bachelor's in Computer Science, Electronics/Electrical Engineering, or related field.
• you should have 3-5 years of IT security experience, be proficient in public cloud management leveraging IAC, and possess a strong understanding of DevSecOps technologies.

Technical Skills

• Practical hands-on application security, API security and Penetration testing
• Good understanding of security tools Coverity, BurpSuite, Trivy, Prisma Cloud , Tenable, CrowdStrike etc.

It’s What We Offer You

• Hybrid work model for workplace flexibility
• Comprehensive health, dental, and life insurance
• Short and long-term disability coverage
• RRSP matching for financial security
• Flexible time-off policies for work-life balance
• Employee assistance program for mental well-being
• Learning benefits, including a LinkedIn Learning subscription and seminars

“Windriver is an equal employment opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, national origin, sex, gender identity, sexual orientation, disability status, protected veteran status or any other characteristic protected by law”