Cybersecurity R&D Engineer II / III

BMA Group Global; San Juan (PR); Hybrid; USD 100,000 - 150,000; Full time

Benefits offered by this job

Relocation support

Job summary

BMA Group Global is seeking Cybersecurity R&D Engineers (Level II or III) to join a hybrid team in Puerto Rico, supporting development and security of routers, switches, and firewalls. Relocation assistance is provided for eligible candidates, with the level determined by experience.

The role covers product security, cryptography, SDL, vulnerability discovery, and AI-enhanced security practices, collaborating across engineering and product teams throughout the lifecycle.

Qualifications

• Bachelor's or Master's degree in a technical field (CS/Cybersecurity) is required.
• 2–3 years of cybersecurity experience with strong networking knowledge.
• Solid understanding of cryptography, security protocols (TLS/SSH/IPsec), and threat modeling.

Responsibilities

• Support product security certifications (NIST FIPS 140, Common Criteria, EU CRA).
• Develop and enhance security capabilities across SDL, vulnerability management, and secure coding practices.
• Perform static/dynamic analysis, penetration testing, and hardware security assessments.
• Collaborate with engineering and product teams to advance the cybersecurity roadmap.
• Apply AI-guided security approaches with governance and oversight.

Education

Bachelor's or Master's degree in Computer Science, Cybersecurity, or related field

Job description

THIS ROLE REQUIRES RELOCATION TO PUERTO RICO, RELOCATION SUPPORT IS PROVIDED FOR ELIGIBLE CANDIDATES

Cybersecurity R&D Engineer II / III

Work Model: Hybrid – approximately 2 days per week in the office

Level: Engineer II or Engineer III, based on experience

About the Opportunity

We are seeking Cybersecurity R&D Engineers (Level II and Level III) to join a dynamic team operating at the forefront of cybersecurity within a global technology organization.

This position will contribute to the development and security of networking products, including routers, switches, and firewalls. The team works across multiple cybersecurity domains, including product security, applied cryptography, security certifications, Secure Development Lifecycle (SDL), vulnerability discovery, and AI-enhanced security practices.

The level offered will be determined based on the candidate's experience and technical background.

Key Responsibilities

• Support product security certifications, including NIST FIPS 140, Common Criteria, and the European Union Cybersecurity Resilience Act (EU CRA).
• Develop and enhance product security capabilities through:
• Certification gap analysis
• Risk-based threat modeling
• Static code analysis
• Dynamic analysis of network devices
• Penetration testing
• Hardware security assessments
• AI-enhanced vulnerability management
• Evaluate and adopt emerging cybersecurity technologies that strengthen product security and development processes.
• Contribute to the execution and advancement of the cybersecurity roadmap.
• Collaborate with engineering managers, platform teams, product teams, and other key stakeholders.
• Support secure product design and development throughout the product lifecycle.
• Apply AI systems to defensive security use cases, including vulnerability discovery and management, while maintaining appropriate AI governance and human oversight.

Education

• Bachelor's or Master's degree in Computer Science, Cybersecurity, or a related technical field.

Experience

• Typically 2–3 years of relevant experience.
• Working knowledge of cybersecurity concepts and practices.
• Basic knowledge of networking, network security protocols, and cryptography.
• Typically 4–6 years of relevant experience.
• Strong/deep cybersecurity knowledge.
• Strong knowledge of networking, network security protocols, and cryptography.
• Greater experience supporting product security initiatives and providing technical guidance to key stakeholders.

Technical Skills

Candidates should have experience or knowledge in several of the following areas:

• Cybersecurity and product security
• Networking and network security
• TLS, SSH, and IPsec
• Cryptography
• Security certifications such as FIPS 140 and Common Criteria
• Threat modeling and vulnerability assessment
• Static and dynamic security analysis
• Penetration testing
• Programming in C and/or Python; Rust is a plus
• AI-assisted vulnerability discovery and management
• Secure Development Lifecycle (SDL) practices

Strong written and verbal technical communication skills are also important for collaborating across engineering and product teams.

Benefits

• Relocation support may be available for eligible candidates.

Candidates will be considered for Engineer II or Engineer III based on their experience and qualifications.