Senior Software Engineer - Security

eBay; United States; Remote; USD 80,000 - 100,000; Full time

Job summary

An established industry player is looking for a passionate Security Engineer to enhance their key and certificate management system. This role involves designing and integrating HSM solutions, developing secure key management systems, and enforcing security policies to protect sensitive materials. The ideal candidate will have a strong understanding of cryptographic algorithms and protocols, proficiency in HSM technologies, and experience with programming languages such as C, Java, and Python. Join a dynamic team committed to innovation and excellence in security practices, where your contributions will help shape the future of ecommerce and create economic opportunities for all.

Qualifications

• Deep understanding of cryptographic principles and secure system design.
• Proficiency in HSM technologies and programming languages like C, Java, Python.

Responsibilities

• Design and integrate HSM solutions into existing infrastructure.
• Develop secure key management systems and enforce security policies.
• Respond to security incidents and optimize HSM performance.

Skills

cryptographic algorithms (RSA, ECC, AES)

HSM technologies

C programming

C++ programming

Java programming

Python programming

Golang programming

security standards (PCI DSS, NIST, FIPS)

problem-solving skills

analytical skills

Education

Certification in security-related fields (CISSP, CISM, CISA)

Job description

At eBay, we're more than a global ecommerce leader — we’re changing the way the world shops and sells. Our platform empowers millions of buyers and sellers in more than 190 markets around the world. We’re committed to pushing boundaries and leaving our mark as we reinvent the future of ecommerce for enthusiasts.

Our customers are our compass, authenticity thrives, bold ideas are welcome, and everyone can bring their unique selves to work — every day. We're in this together, sustaining the future of our customers, our company, and our planet.

Join a team of passionate thinkers, innovators, and dreamers — and help us connect people and build communities to create economic opportunity for all.

We are seeking a Security Engineer to join our team and play a crucial role in developing and maintaining our robust key and certificate management system. This position requires a deep understanding of cryptographic principles, HSM technologies, and secure system design.

What you will accomplish

1. HSM Integration: Design, implement, and integrate HSM solutions into our existing infrastructure, ensuring seamless operation and high security standards.
2. Key and Secrets Management: Develop and maintain efficient and secure key (KMS) and secrets management systems, including generation, storage, rotation, and revocation.
3. Security Policy Enforcement: Enforce strict security policies and processes to protect sensitive cryptographic materials and system integrity.
4. Performance Optimization: Optimize HSM performance to minimize latency and improve throughput for critical cryptographic operations.
5. Incident Response: Respond to security incidents involving KMS, HSMs, conducting thorough investigations and implementing corrective measures.
6. Documentation: Create comprehensive documentation, including system design documents, operational procedures, and security guidelines.
7. Stay Updated: Stay abreast of the latest advancements in HSM technologies, cryptographic algorithms, and security best practices.
8. Identify gaps and issues across systems and functional areas, propose solutions, and drive those resolutions.
9. Champion best practices and advanced concepts and impact the business by delivering solutions that address business needs.
10. Lead and empower others, taking responsibility for small projects and collaborating across functional teams to influence change.
11. Actively seek feedback and ways to improve team performance and projects, demonstrating strong communication skills.

What you will bring

1. Strong understanding of cryptographic algorithms (RSA, ECC, AES, etc.) and protocols (TLS, SSL, SSH)
2. Proficiency in HSM technologies, including PCIe HSMs
3. Experience with programming languages such as C, C++, Java (and spring.io), Python, or Golang
4. Knowledge of security standards and compliance frameworks (PCI DSS, NIST, FIPS)
5. Strong problem-solving and analytical skills
6. Excellent attention to detail
7. Strong communication and documentation skills
8. Passion for security and a commitment to excellence

Preferred Qualifications:

1. Experience with cloud technologies
2. Knowledge of secure coding practices
3. Certification in security-related fields (CISSP, CISM, CISA)