Product Security Engineer

Fortinet; California, Sunnyvale (MO, CA); On-site; USD 110,000 - 150,000; Full time

Job summary

An established industry player is seeking a Product Security Engineer to join their Product Security Incident Response Team. This entry-level position offers an exciting opportunity for individuals eager to dive into the PSIRT and threat research field. You'll receive on-the-job training while managing product security incidents, conducting vulnerability research, and collaborating with peers. The role emphasizes a strong understanding of security principles and proficiency in C programming, alongside valuable exposure to vulnerability scanning and pentesting methodologies. Join a supportive environment that values diverse backgrounds and offers a competitive Total Rewards package.

Benefits

Medical Insurance

Dental Insurance

Vision Insurance

401(k)

Paid Holidays

Vacation

Sick Leave

Comprehensive Leave Program

Qualifications

• Entry-level role ideal for those eager to enter PSIRT and threat research.
• Solid security background and understanding of Fortinet products are advantageous.

Responsibilities

• Support management of the inbound PSIRT Queue and allocate tickets to engineers.
• Triage incidents, test for vulnerabilities, and investigate source code.

Skills

C Programming

Scripting Skills

Understanding of Asymmetric Cryptography

Vulnerability Scanning Tools

Pentesting Methodologies

Education

Bachelor's degree in Computer Science

Master's degree

Tools

Vulnerability Scanning Tools

Fuzzing Tools

Job description

The Product Security Incident Response Team is looking for a Product Security Engineer to handle product security incidents and perform vulnerability research on Fortinet products. This is an entry-level role, ideal for someone eager to enter the PSIRT and threat research industry. On-the-job training by peers will be provided.

Responsibilities:

• Support management of the inbound PSIRT Queue, allocate tickets to engineers, and ensure timely handling of tickets.
• Triage incidents, answer questions, test for vulnerabilities, investigate source code, and create/follow up on incidents in the Incident Management System as needed.
• Escalate to senior analysts when incidents fall outside the current knowledge scope.
• Identify and report unknown vulnerabilities in Fortinet products via black box analysis, fuzzing, and source code auditing.

Skills and Experience:

Good understanding of Fortinet product lineup and a solid security background are advantageous.

Understanding of asymmetric cryptography, scripting skills, high proficiency in C language, and attention to detail are required.

Knowledge of vulnerabilities at the source code level and experience with vulnerability scanning tools are beneficial. Experience with pentesting methodologies and fuzzing tools is a plus.

Education:

Bachelor's degree in Computer Science or equivalent preferred; Master's degree preferred.

The US base salary range for this full-time position is $110,000-$150,000. Fortinet offers benefits including medical, dental, vision, life and disability insurance, 401(k), paid holidays, vacation, sick leave, and a comprehensive leave program.

Salary offers depend on factors such as knowledge, skills, qualifications, experience, and location. All roles are eligible for the Fortinet equity program. Bonus eligibility is reviewed at hire and annually at the company's discretion.

Why Join Us:
We encourage candidates from all backgrounds and identities to apply. We offer a supportive environment and a competitive Total Rewards package to support your health and financial well-being. Embark on a challenging, enjoyable, and rewarding career with Fortinet. Join us in delivering solutions that make a meaningful impact to over 660,000 customers worldwide.