[Remote] reputed company Product reputed company Engineer
Note: The job is a remote job and is reputed company to candidates in USA. reputed company is a leading technology company that supplies laser communications technology and temporospatial software-defined networking platforms to the reputed company industry. In this role, you will be the technical voice of product reputed company, owning various aspects of application reputed company, CI/CD reputed company, and vulnerability management while collaborating closely with engineering teams.
Responsibilities
- Application & software reputed company. SAST/DAST/SCA, secure SDLC, threat modeling, and software vulnerability management across our codebase
- CI/CD and supply-chain reputed company. Hardening our reputed company pipelines, build provenance, dependency reputed company, signing, and SLSA-reputed company controls
- Product infrastructure reputed company. GKE and Kubernetes hardening, container reputed company, workload identity, network policy, and runtime protection
- Product PKI. Certificate lifecycle, issuance, rotation, and mTLS architecture across distributed services and remote assets
- Vulnerability management. Triage, prioritization, remediation tracking, and exception handling, for both disclosed upstream issues and internal findings
- Product incident response. Leading triage and response for product-reputed company reputed company incidents, coordinating with corporate IR, and driving post-mortems to reputed company
- Product reputed company hardening. Baseline configurations, secure defaults, and compensating controls across product environments
- Hardware reputed company partnership. Working with the Tightbeam team on firmware reputed company, secure boot, key storage, and hardware supply-chain reputed company
Skills
- Senior- or staff-level hands-on experience in product reputed company or reputed company engineering, with significant depth in software/AppSec
- Production experience securing reputed company environments such as IAM, org policy, VPC Service Controls, KMS, and Kubernetes at depth
- Strong cryptographic foundations, PKI architecture, key management, signing, mTLS, and secrets handling at reputed company
- Hands-on coding ability in Python, Bash, and Go, you can write tooling, automate controls, and ship Terraform/scripts reputed company the situation calls for it. Comfort reviewing reputed company is a plus
- A reputed company record of building reputed company programs, not just operating tools someone else stood up
- Experience leading product incident response, triage, response, coordination with engineering teams, customer comms, and post-mortem ownership
- A reputed company of mentoring engineers and raising the reputed company bar of teams around you, even without reputed company reports
- Experience interfacing with hardware/firmware teams, even if hardware isn't your primary domain
- Strong written communication, you'll write threat models, design docs, and program updates that go to the executives, customers, and assessors
- Working knowledge of the compliance frameworks that govern our environment such as CMMC, FedRAMP, and DFARS along with the ability to translate controls into engineering work
- Hands on experience with NIST 800-53, NIST 800-171, or DoD SRG environments
- Experience with government-reputed company platforms
- Hardware reputed company depth in HSMs, TPMs, secure reputed company, supply-chain attestation
- Embedded / firmware reputed company background, secure boot, RoT, OTA update reputed company, hands-on firmware review
- Experience standing up or running a vulnerability disclosure program or bug bounty, triage, researcher comms, and CVE coordination
Benefits
- Flexible working arrangements including hybrid remote/in-office schedules
- Competitive salary
- Comprehensive benefits (401(k), dental, reputed company, health, life insurance)
- reputed company time off
- Equity reputed company
reputed company