Software Engineer (Security)
Bangalore, Karnataka, India
Hewlett Packard Enterprise
Discover HPE edge-to-cloud, enterprise compute IT, data, and security solutions. Learn how HPE empowers digital transformation through AI and sustainability.This role has been designed as ‘Hybrid’ with an expectation that you will work on average 2-3 days per week from an HPE office.
Who We Are:
Hewlett Packard Enterprise is the global edge-to-cloud company advancing the way people live and work. We help companies connect, protect, analyze, and act on their data and applications wherever they live, from edge to cloud, so they can turn insights into outcomes at the speed required to thrive in today’s complex world. Our culture thrives on finding new and better ways to accelerate what’s next. We know diverse backgrounds are valued and succeed here. We have the flexibility to manage our work and personal needs. We make bold moves, together, and are a force for good. If you are looking to stretch and grow your career our culture will embrace you. Open up opportunities with HPE.
Job Description:
HPE Operations is our innovative IT services organization. It provides the expertise to advise, integrate, and accelerate our customers’ outcomes from their digital transformation. Our teams collaborate to transform insight into innovation. In today’s fast paced, hybrid IT world, being at business speed means overcoming IT complexity to match the speed of actions to the speed of opportunities. Deploy the right technology to respond quickly to market possibilities. Join us and redefine what’s next for you.
What you’ll do:
As the Security engineer for HPE’s Digital Experience Development team you will be working as the recognized authority and bring relevant subject matter expertise on application security strategy, architecture and roadmaps, review application architectures, code and system services from a security perspective.
Drive assessment, operationalization and adoption of new technologies, platforms and tools.
You will contribute to key innovations across complex product specs and architectures to be successful.
Influence and lead cross-functional teams and projects that affect the organizations long-term goals and objectives.
Develop security metrics to assess security performance trends.
You understand secure software development and works across engineering teams to ensure that security is in alignment with development approaches.
You are a recognized security expert and bring business acumen to influence decisions of HPE’s executive business leadership and outsourced development partners.
You enjoy providing guidance and mentoring to less-experienced staff members to set an example of secure software systems design, innovation and excellence.
You understand DevOps life cycles and what it takes to build and test a product for the cloud with customer experience at the heart of it.
Direct and coordinate the implementation of test automation and other test tools (security, quality etc.)
Review and evaluates designs, project activities to ensure standards compliance and provides tangible feedback to improve security, product quality and mitigate failure risk.
Have worked in an Agile / SCRUM methodology to organize and execute projects
What you need to bring:
Bachelor's or Master's degree in Computer Science, Information Systems, or equivalent. Typically 8+ years’ experience. Working experience in product security is highly required for this role.
· Experience designing and developing software systems design tools and languages
· Excellent analytical, logical problem solving skills.
· You have experience determining security requirements of applications & services.
· Experience evaluating test strategies and requirements; researching information security standards; conducting system security and vulnerability analyses and risk assessments; studying architecture/platform; identifying integration issues; preparing test strategy.
· OWASP Top 10 understanding is a must.
· Experience with Vulnerability Assessment (Tools: nmap, Nexpose or Nessus, Fierce, Wireshark etc.)
· Experience with Web Application Security Testing (Tools: Burp, OWASP ZAP etc.).
· Should have working experience in Penetration testing with tools in Kali Linux.
· Proven Experience in Comprehensive Application Threat Analysis (CATA), ability to perform threat modelling and establish procedures to conduct security requirements gap analysis
· Good to have certifications CISSP, CEH, Comptia Security+, OSCP. (Any one is fine)
· Good understanding of customer centric workflows
· Self-motivated and can deliver on tight schedules with minimal supervision
· Excellent written and verbal communication skills.
· Ability to effectively communicate product security, architectures, design proposals and negotiate options at business unit and executive levels.
· You have experience with software testing methodologies, including writing and execution of test plans, debugging, and testing scripts/tools and are proficient in scripting in Python, testing REST APIs with a knowledge of automation framework development, integrate automated workflows into Jenkins for continuous runs.
· Should know standards of coding (e.g. Java, API’s, Full stack, Apex etc.) and able to learn new coding language to perform active secure code review.
Additional Skills:
Cloud Architectures, Cross Domain Knowledge, Design Thinking, Development Fundamentals, DevOps, Distributed Computing, Microservices Fluency, Full Stack Development, Security-First Mindset, Solutions Design, Testing & Automation, User Experience (UX)What We Can Offer You:
Health & Wellbeing
We strive to provide our team members and their loved ones with a comprehensive suite of benefits that supports their physical, financial and emotional wellbeing.
Personal & Professional Development
We also invest in your career because the better you are, the better we all are. We have specific programs catered to helping you reach any career goals you have — whether you want to become a knowledge expert in your field or apply your skills to another division.
Diversity, Inclusion & Belonging
We are unconditionally inclusive in the way we work and celebrate individual uniqueness. We know diverse backgrounds are valued and succeed here. We have the flexibility to manage our work and personal needs. We make bold moves, together, and are a force for good.
Let's Stay Connected:
Follow @HPECareers on Instagram to see the latest on people, culture and tech at HPE.
#india#operationsJob:
EngineeringJob Level:
TCP_04
HPE is an Equal Employment Opportunity/ Veterans/Disabled/LGBT and Affirmative Action employer. We are committed to diversity and building a team that represents a variety of backgrounds, perspectives, and skills. We do not discriminate and all decisions we make are made on the basis of qualifications, merit, and business need. Our goal is to be one global diverse team that is representative of our customers, in an inclusive environment where we can continue to innovate and grow together. Please click here: Equal Employment Opportunity.
Hewlett Packard Enterprise is EEO F/M/Protected Veteran/ Individual with Disabilities.
HPE will comply with all applicable laws related to employer use of arrest and conviction records, including laws requiring employers to consider for employment qualified applicants with criminal histories.
* Salary range is an estimate based on our InfoSec / Cybersecurity Salary Index 💰
Tags: Agile APIs Application security Automation CEH CISSP Cloud Compliance CompTIA Computer Science DevOps Full stack Java Jenkins Kali Linux Microservices Nessus Nmap OSCP OWASP Pentesting Product security Python Risk assessment Scripting Scrum Security strategy Strategy
Perks/benefits: Career development Health care Team events
More jobs like this
Explore more career opportunities
Find even more open roles below ordered by popularity of job title or skills/products/technologies used.