Staff Software Development Engineer

Fortinet, Inc.; Sunnyvale (CA); On-site; USD 150,000 - 215,000; Full time

Job summary

Fortinet, Inc. is seeking an experienced Staff Software Development Engineer to develop and enhance features in signature engine, header security, CSRF, WAF scripting, API security, Bot mitigation, and more.

You will work with Cloud and Intelligence teams to improve cloud deployment features and false positive handling, while aligning with Product Management on roadmaps and certifications. You will engage with R&D and QA across the lifecycle to deliver high quality features and keep up with

Qualifications

• 8+ years of relevant work experience.
• Bachelor’s degree in Computer Science, Engineering or related technical program.
• Proficient in C language and Linux development tools (gcc, gdb, libc).
• Solid knowledge of HTTP/HTTPS/HTTP2 protocols.
• Familiarity with network firewalls, IDS/IPS, VPN, SSL, WAF, ADC.
• Experience with Linux systems and networking troubleshooting.
• Hands-on with web servers/proxies (Nginx/Apache/Haproxy).
• Understanding of HTML/CSS/JavaScript/JSON/XML and OWASP Top 10.
• Experience with security tools like ModSecurity, Snort, Burp Suite, OWASP ZAP, Metasploit, Sqlmap, Selenium, Puppeteer.
• Strong self-learning abilities.
• Must be authorized to work in the U.S. without sponsorship.

Responsibilities

• Developing and enhancing features in signature engine, header security, CSRF, WAF scripting, API security, Bot mitigation and so on.
• Enhance debugging and unit testing tools for Web security features.
• Keep abreast of the latest Web security events and provide expertise on Web security event response and internal training.
• Collaborate with Cloud and Intelligence teams to improve features and intelligence DB in cloud deployments, especially on false positives and evasion cases.
• Work with Product Management on roadmaps, new features design, and product certifications.
• Collaborate with R&D and QA throughout the product development lifecycle to deliver high quality features.
• Research new technologies and common tools; devise new solutions.

Skills

Web security concepts

HTTP/HTTPS/HTTP2

Linux troubleshooting

Self-learning

Team collaboration

Security awareness

Education

Bachelor's degree in Computer Science/Engineering or related

Tools

C language

GCC

GDB

libc

GNU Makefile

Nginx

Apache

HAProxy

Burp Suite

OWASP ZAP

Metasploit

Selenium

Puppeteer

ModSecurity

Job description

Fortinet is calling for an experienced Staff Software Development Engineer who can think outside the box, has a logical approach to coding, and is looking to grow their career in the network security industry.

Responsibilities：

• Developing and enhancing features in signature engine, header security, CSRF, WAF scripting, API security, Bot mitigation and so on
• Enhance debugging and unit testing tools for Web security features
• Keep abreast of the latest Web security events and provide expertise on Web security event response and internal training
• Work with the Cloud and Intelligence teams to improve the features and intelligence DB in cloud deployment, especially on false positive and evasion cases
• Work with the Product Management teams on the product roadmaps, new features design, and product certifications
• Work with R&D and QA throughout the product development lifecycle to deliver high quality features
• Research new technologies and common tools in the industry and be able to devise new solution

Requirements：

• 8+ years of relevant work experience
• Have a Bachelors degree in Computer Science, Engineering or related technical program
• Proficient in C language, proficient in development tools and environments under Linux, such as gcc gdb libc, etc., able to understand GNU Makefile.
• Solid knowledge of the HTTP/HTTPS/HTTP2 protocol.
• Familiarity with network firewalls, IDS/IPS, VPN, SSL, WAF, ADC.
• Experience with Linux systems and networking related troubleshooting.
• Hands-on experience with developing in common web servers and proxies(like Nginx/Apache/Haproxy)
• Understanding of Web technologies like HTML/CSS/Javascript/JSON/XML, and common Web security issues like OWASP top 10, including SQL injection, XSS, CSRF, MITM, DoS.
• Experience with popular security detecting, penetration testing, web crawling tools is a plus, like ModSecurity, Snort, Burp Suite, OWASP ZAP, Metasploit, Sqlmap, Selenium, Puppeteer, etc.
• High self-learning abilities

Must be authorized to work in the U.S. without sponsorship.

The US base salary range for this full-time position is $150,000-$215,000. Fortinet offers employees a variety of benefits, including medical, dental, vision, life and disability insurance, 401(k), 11 paid holidays, vacation time, and sick time as well as a comprehensive leave program.

Wage ranges are based on various factors including the labor market, job type, and job level. Exact salary offers will be determined by factors such as the candidate's subject knowledge, skill level, qualifications, experience, and geographic location.

All roles are eligible to participate in the Fortinet equity program, Bonus eligibility is reviewed at time of hire and annually at the Company’s discretion.

Why Join Us:

We encourage candidates from all backgrounds and identities to apply. We offer a supportive work environment and a competitive Total Rewards package to support you with your overall health and financial well-being. Embark on a challenging, enjoyable, and rewarding career journey with Fortinet. Join us in bringing solutions that make a meaningful and lasting impact to our 660,000+ customers around the globe.