Lead Product Security Engineer

Cloud Software Group, LLC; San Ramon (CA); On-site; USD 192,000 - 287,000; Full time

Benefits offered by this job

Healthcare benefits

401(k) with company match

Bonus potential

Job summary

Cloud Software Group, LLC is seeking a Lead Product Security Engineer to lead SSDLC for On-Prem and Cloud products. You will work hands-on with security across engineering teams to drive robust security designs and reviews.

Responsibilities include manual code reviews (C/C++), crash analysis with GDB, and conducting internal penetration tests. You will propose scalable solutions and prototypes to prevent security issues at scale, aligning with OWASP guidelines.

Qualifications

• 9+ years of hands-on experience in product security with emphasis on C/C++ development and security analysis.
• A full-time degree in Engineering (preferably Computer Science related).
• Expertise in at least one security area (Unix systems, networking, cryptography).
• Hands-on C/C++ with strong low-level Linux systems knowledge.

Responsibilities

• Lead and execute the Secure Software Development Lifecycle (SSDLC) for Cloud Software Group On-Prem and Cloud products to ensure security robustness.
• Provide guidance to product development teams on design changes per security requirements.
• Perform manual source code review primarily in C and C++.
• Analyze crashes to identify vulnerabilities using GDB and core dump analysis.
• Execute penetration tests to identify security vulnerabilities.
• Develop prototypes to prevent security problems at scale.

Skills

C/C++ development

Security analysis

Low-level Linux systems

Networking (TCP/IP, HTTP/S, DNS)

GDB debugging

Threat modelling

Vulnerability remediation

Reverse engineering

Fuzzing (AFL, Peach)

Education

Bachelor's degree in Engineering (CS related)

Tools

GDB

Makefiles

AFL

Peach

Job description

About This Team:

As a Lead Product Security Engineer, you will work hands-on in product security alongside top engineering talent to solve complex security challenges.

Duties and Responsibilities

• You will be responsible for leading and executing the Secure Software Development Lifecycle (SSDLC) for Cloud Software Group On-Prem and Cloud products to ensure that oursoftware meets the customer expectation ofsecurity robustness.
• You will provide guidance to product development teams on design changes as per security requirements.
• Manual Source Code Review primarily C and C++ programming languages
• Crash Exploitability Analysis - Analyze Crashes to Find Security Vulnerabilities using tools such as gdb (Good to have)
• Execute the penetration tests internally to identify security vulnerabilities
• Identify opportunities to prevent security problems at scale, Develop prototypes to prevent these security problems.

Basic Qualifications

• 9+ years of hands-on experience in product security, with a strong emphasis on C/C++ development and security analysis
• You have a Full-time degree in Engineering (Preferably Computer Science related)
• You are an expert in at least one of these areas in security - Unix System, Network, Cryptography
• Demonstrated hands-on experience in C and C++ programming, with strong low-level Linux systems knowledge.
• Good knowledge of Networking (TCP/IP) and other protocols like HTTP/S, DNS, et.al.
• Debugging Skills like GDB, core dump analysis and understanding Makefile concepts.
• Extensive knowledge of common vulnerabilities - able to explain and remediate the OWASP Top 10 vulnerabilities across multiple programming languages
• Reverse Engineering (Good to have)
• Fuzzing using tools such as AFL, Peach (Good to have)
• Deep understanding of application architecture and design principles
• Experience in design review and threat modelling activities
• You are capable of writing exploits for vulnerabilities identified in those respective areas.
• Have excellent capabilities to identify security vulnerabilities and perform root cause analysis.
• Good to have certifications such as OSCP, OSCE, GPEN, CRTP etc.

Compensation may vary depending on your location, qualifications including job-related education, training, experience, licensure, and certification, that could result at a level outside of these ranges. Certain roles are eligible for additional rewards, including annual bonus, and sales incentives depending on the terms of the applicable plan and role as well as individual performance.

CA generally ranges: $191,520-$287,280

All other locations fall under our General State range: $168,000-$252,000

Benefits may vary depending on the nature of your employment with Cloud Software Group and the country where you work. U.S. based employees are typically offered access to healthcare, life insurance and disability benefits, 401(k) plan and company match, among others. This requisition has no specific deadline for completion.

About Us:

Cloud Software Group is one of the world's largest cloud solution providers, serving more than 100 million users around the globe. When you join Cloud Software Group, you are making a difference for real people, each of whom count on our suite of cloud-based products to get work done - from anywhere. Members of our team will tell you that we value passion for technology and the courage to take risks. Everyone is empowered to learn, dream, and build the future of work. We are on the brink of another Cambrian leap -- a moment of immense evolution and growth. And we need your expertise and experience to do it. Now is the perfect time to move your skills to the cloud.

Cloud Software Group is firmly committed to Equal Employment Opportunity (EEO) and to compliance with all federal, state and local laws that prohibit employment discrimination. All qualified applicants will receive consideration for employment without regard to age, race, color, creed, sex or gender, sexual orientation, gender identity, gender expression, ethnicity, national origin, ancestry, citizenship, religion, genetic carrier status, disability, pregnancy, childbirth or related medical conditions (including lactation status), marital status, military service, protected veteran status, political activity or affiliation, taking or requesting statutorily protected leave and other protected classifications.

Cloud Software Group will consider qualified applicants with a criminal history and conduct the recruiting process in accordance with the California Fair Chance Act, Los Angeles County Fair Chance Ordinance for Employers and San Diego Fair Chance Ordinance. For access to the laws see the following links:California FCAandLos Angeles FCO.

If you need a reasonable accommodation due to a disability during any part of the application process, please contact us via the Bridge portal for assistance.