Senior Software Security Engineer

ChargePoint

India

On-site

INR 7,005,253 - 10,507,880

Full time

14 days+

Get more replies from employers

Send a job-specific resume in minutes.

Job summary

Join a forward-thinking company at the forefront of the electric vehicle revolution as a Senior Software Security Engineer. In this dynamic role, you'll be responsible for designing and implementing robust security measures across a wide range of applications and services. You'll collaborate with cross-functional teams to integrate security into the product lifecycle, ensuring that every aspect of our technology meets the highest standards of security. With a commitment to innovation and excellence, this role offers you the chance to make a significant impact in the rapidly evolving EV charging industry, while also providing ample opportunities for professional growth and development.

Qualifications

4+ years in application and infrastructure security tools.
Experience in security assessments and risk management.
Strong understanding of security architecture and SDLC.

Responsibilities

Design and implement security controls for applications and services.
Conduct security assessments and manage product risk.
Lead security projects and promote security awareness.

Skills

Application Security

Threat Modeling

Vulnerability Management

CI/CD Pipeline

Microservices

Programming Languages (C, C++, Java, Python, Go)

Networking Protocols (TCP/IP, SSL/TLS)

Security Tools (SAST, DAST)

Education

Bachelor's Degree in Computer Science or related field

Relevant Security Certifications (CISSP, CISM)

Tools

Security Assessment Tools

Application Security Tools

Job description

Direct message the job poster from ChargePoint

"Global Talent Research (Sourcer & Recruiter) - Center of Excellence, Diversity, Equality, Inclusion & Belonging(DEIB)- (Global Talent Sourcing) and…

About Us

With electric vehicles expected to be nearly 30% of new vehicle sales by 2025 and more than 50% by 2040, electric mobility is becoming a reality. ChargePoint (NYSE: CHPT) is at the center of this revolution, powering one of the world’s leading EV charging networks and a comprehensive set of hardware, software and mobile solutions for every charging need across North America and Europe. We bring together drivers, businesses, automakers, policymakers, utilities and other stakeholders to make e-mobility a global reality.

Since our founding in 2007, ChargePoint has focused solely on making the transition to electric easy for businesses, fleets and drivers. ChargePoint offers a once-in-a-lifetime opportunity to create an all-electric future and a trillion-dollar market.

At ChargePoint, we foster a positive and productive work environment by committing to live our values of Be Courageous, Charge Together, Love our Customers, Operate with Openness, and Relentlessly Pursue Awesome. These values guide how we show up every day, align, and work together to build a brighter future for all of us.

Join the team that is building the EV charging industry and make your mark on how people and goods will get everywhere they need to go, in any context, for generations to come.

Reports To

Senior Staff, Product Security

What You Will Be Doing

ChargePoint is looking for a Sr. Software Security Engineer who will build secure products, drive threat modeling, and remediate vulnerabilities. You will architect, design, consult and implement new security paradigms for systems in a rapidly evolving problem space. You will work with Product Security lead on product security strategy, implement tools, architect our product security roadmap, develop process, perform threat assessment and security reviews, and work with engineering teams to implement a security by design culture as part of our product lifecycle. This role will be responsible for providing guidance, advice, oversight, and implementation of controls on product security matters.

As a Software Security engineer, you will design security controls and help validate that our services, applications, stations, and emerging technologies are designed and implemented to the highest security standards. You will be responsible for analyzing the security of applications and services, discovering, and addressing security issues, designing security automation, and decisively taking action to mitigate emerging threats throughout a full secure development life cycle (SDLC). This role will provide career growth opportunities as you gain new security skills in the course of your work. You have an opportunity to experiment, learn, build tools, and work with teams building new technology and services at massive scale in the EV charging space.

This will be an amazing opportunity to define and build secure systems from the ground up from hardware to platform to cloud. The engineer will possess deep technical knowledge and ability and will be tasked with the most demanding projects and design requirements.

What You Will Bring To ChargePoint

Experience building relationships with key stakeholders across the business to understand their current and planned product activities (application and embedded)
Supporting the integration of security standards, controls, policies into the SDLC
Developing and managing a comprehensive product security training program and promoting security awareness throughout the product team agenda
Identifying gaps in security design and reviewing proposed application and product architecture with an aim to recommend changes or enhancements
Experience developing processes and policies to mitigate key product risks
Performing security assessments, identifying, and mitigating risks through effective tools, processes, training, and guidance. Managing product risk assessments and remediation plans
Leading internal product meetings to present key product security metrics and risks to senior leadership
Influence decision-makers and stakeholders to achieve a consistently high security bar
Lead security projects (including security reviews, tool development, and creation of new security practices) with end-to-end ownership
Experience working with engineering teams to design and implement security controls
Genuine passion for building effective and pragmatic security tools to assess products and services

Requirements

4+ years’ experience in designing and implementing application and infrastructure security tools
Working experience with CI/CD pipeline, containerization and Microservices
Understanding of security architecture and systems to connect the dots between hardware, embedded systems, cloud infrastructure and platform.
Experience deploying and securing SaaS applications and cloud environments at scale
Experience in application security across SDLC activities such as threat modelling, secure code review, vulnerability management and penetration testing
Understanding of different programming languages (C, C++, Java, Python, Go)
Ability to identify and mitigate product security risks with the ability to understand materiality of risks and prioritize / differentiate response accordingly
Experience in application security tools covering SAST, DAST, IAST/RASP and OWASP
Experience building, reviewing, and managing threat models / assessments
An understanding of networking and communication protocols (such as TCP/IP, UDP, SSL/TLS, IPSEC, HTTP, HTTPS)
Experienced in layers of security and the related security threats, exploits and prevention
Excellent written and verbal communication skills with the ability to influence broad range of stakeholders
Experience in implementing and managing product security tools (good to have)
Experience in the automotive or EV charging industry (good to have)
Experience with embedded / hardware security (good to have)
Experience with cryptography / encryption / PKI (good to have)

Location

We are committed to an inclusive and diverse team. ChargePoint is an equal opportunity employer. We do not discriminate based on race, color, ethnicity, ancestry, national origin, religion, sex, gender, gender identity, gender expression, sexual orientation, age, disability, veteran status, genetic information, marital status or any legally protected status.

If there is a match between your experiences/skills and the Company needs, we will contact you directly.

ChargePoint is an equal opportunity employer.

Applicants only - Recruiting agencies do not contact.

Seniority level