Senior Software Engineer (Security Domain)

NetApp; Bengaluru; Hybrid; INR 2,500,000 - 4,800,000; Full time

Job summary

NetApp is seeking a Cybersecurity Development Engineer to design, develop, and enhance security capabilities for ONTAP, NetApp's flagship storage OS. You will tackle authentication, encryption, key management, and secure communications while collaborating across kernel, networking, cloud, and product security teams.

You will engage in vulnerability discovery, threat modeling, secure development, and AI-assisted security analysis to protect data across enterprise, cloud, and AI environments.

Qualifications

• Strong programming skills in C, C++, and Python are required.
• Solid knowledge of OS, computer architecture, data structures and networking.
• Experience with security assessment methodologies and tools (static/dynamic analysis, fuzzing, CVE triage).
• Experience in red-team, offensive security or vulnerability research on systems or products.

Responsibilities

• Design and implement security features including authentication, TLS, PKI, and encryption.
• Conduct threat modeling, risk assessments, and attack-tree analyses for admin paths and roles.
• Translate security findings into product requirements and automated tests.
• Lead remediation, validation, and release readiness for vulnerabilities.
• Develop AI-assisted security automation for vulnerability discovery and response.
• Collaborate with PSIRT and product security to handle disclosures and threats.
• Mentor junior engineers and contribute to security excellence across teams.

Skills

C/C++/Python

Security assessment

Threat modeling

Debugging in Linux/Unix

Education

Bachelor's degree in CS/Engineering

Master's degree + 8+ years experience

Tools

OpenSSL

OpenSSH

StrongSwan

Job description

Job Summary

Join the Security Engineering team as Senior Software Engineer and help secure NetApp's flagship storage operating system, ONTAP. As a Cybersecurity Development Engineer, you will design, develop, and enhance security capabilities that protect critical customer data across enterprise, cloud, and AI environments.

You will work on technologies spanning authentication, authorization, encryption, key management, secure communications, vulnerability mitigation, and security hardening. You will collaborate closely with kernel, networking, cloud, storage, and product security teams to build secure-by-design solutions while helping ONTAP meet evolving regulatory and customer security requirements.

This role combines deep systems software engineering with modern cybersecurity practices, including vulnerability discovery, threat modeling, secure development, incident response support, and AI-assisted security analysis.

Job Requirements

Design and develop security features including:

• Authentication and authorization
• RBAC and privilege management
• TLS/mTLS and secure communications
• IPsec and secure networking
• PKI and certificate management
• Encryption and key management
• Data-at-rest and data-in-transit protection
• Cryptographic services
• Conduct security architecture reviews, threat modeling, risk assessments, and attack-tree analysis for administrative operations, credential paths, and role boundaries.
• Translate security findings and threat models into product requirements, actionable test plans, and automated security tests.
• Investigate vulnerabilities affecting ONTAP and third-party components; assess exploitability and customer impact; and drive remediation, validation, release readiness, and regression test coverage.
• Develop AI-assisted security automation for vulnerability discovery, triage, detection, validation, remediation, suspicious-behavior investigation, and security response.
• Partner with Product Security and PSIRT teams to improve security assessment workflows and respond to customer-reported vulnerabilities, security disclosures, emerging threats, and technical escalations.
• Support compliance and certification programs including FIPS 140-3, Common Criteria, NIST security standards, and the EU Cyber Resilience Act (CRA).
• Translate regulatory and security requirements into product capabilities, engineering controls, security evidence, and release criteria.
• Participate in customer security reviews and incident response activities.
• Mentor junior engineers and contribute to technical excellence across the organization.

Required Qualifications

• Strong programming skills in C, C++, and Python.
• Solid knowledge of:
• Operating systems
• Computer architecture
• Data structures and algorithms
• Networking fundamentals
• Concurrency and multithreaded programming
• Experience with security assessment methodologies and tools, including static and dynamic analysis, fuzzing, dependency analysis, and CVE triage.
• Experience conducting red-team, offensive security, vulnerability research, or security assessment activities on systems or products, including documenting findings, evaluating risk, and providing actionable remediation guidance.
• Proven experience building security automation, vulnerability assessment workflows, or automated security test frameworks.
• Strong debugging skills using tools such as GDB, DTrace, packet analyzers, and Linux/Unix development tools.
• Experience in one or more of the following areas:
• Authentication and identity management, including Kerberos
• TLS/mTLS and IPsec
• PKI, cryptography, and key management
• OpenSSL, OpenSSH, and StrongSwan
• FIPS 140-3 and Common Criteria
• Post-Quantum Cryptography
• OWASP, MITRE ATT&CK, and STRIDE
• Secure Software Development Lifecycle (SDL)
• Storage, distributed systems, or cloud infrastructure
• Ability to solve complex technical problems independently.
• Proven ability to collaborate across multiple engineering disciplines, including systems, networking, storage, cloud, and product security teams.

Ideal Candidate

• Security-focused systems engineer passionate about protecting customer data.
• Comfortable working across storage, networking, operating systems, distributed systems, and cybersecurity domains.
• Self-motivated, curious, and driven to solve complex technical challenges.
• Excited to shape the future of ONTAP Security through innovation, automation, and secure-by-design principles.

Education

• Bachelor's degree in Computer Science, Computer Engineering, Cybersecurity, or related field and 5+ years of relevant experience; or
• Master's degree and 8+ years of relevant experience; or
• Equivalent combination of education and industry experience.

135931

We are all about helping customers turn challenges into business opportunity. It starts with bringing new thinking to age-old problems, like how to use data most effectively to run better - but also to innovate. We tailor our approach to the customer's unique needs with a combination of fresh thinking and proven approaches.

At NetApp, we embrace a hybrid working environment designed to strengthen connection, collaboration, and culture for all employees. This means that most roles will have some level of in-office and/or in-person expectations, which will be shared during the recruitment process.

Equal Opportunity Employer:

NetApp is firmly committed to Equal Employment Opportunity (EEO) and to compliance with all federal, state and local laws that prohibit employment discrimination based on age, race, color, gender, sexual orientation, gender identity, national origin, religion, disability or genetic information, pregnancy, protected veteran status, and any other protected classification.

Why You'll Thrive at NetApp

At NetApp, you won't wait for the perfect moment—you'll make it. The early planning, the extra thought, the bold idea that turns good into great: That's how our people operate and how we continue to push the boundaries of data infrastructure.

NetApp is the trusted partner for organizations transforming data into opportunity. As the only enterprise-grade storage service natively embedded in Google Cloud, AWS, and Microsoft Azure, we empower customers to run everything from traditional workloads to enterprise AI with unmatched performance, resilience, and security.

Our culture

We celebrate mold breakers, bold thinkers, and problem solvers. We reward initiative, impact, and ownership. We provide flexibility so you can balance professional ambition with your personal life. Here, differences are not just welcomed—they drive everything we do.

If you're ready to innovate, rise to the challenge, and own every moment - make your next move your best one.

AI Disclosure

For select roles, some stages of our hiring process may use artificial intelligence tools to help evaluate applications and candidate selection. These tools support—rather than replace—human decision-making.