Perform cybersecurity assurance activities such as static analysis, dynamic analysis, and fuzz testing.
Perform attack surface analysis at varying levels of software and hardware abstraction.
Collaborate with product development teams to embed cybersecurity into software development activities.
Focus on ensuring compliance with best practices and industry standard requirements pertaining to software security activities defined by the AVCDL.
Prepare and present evidence in the safety case to demonstrate readiness to launch new products or release new software versions from a software security perspective.
Train internal stakeholders on software security practices and act as a resource where expert software security assistance is needed.

Requirements

Bachelor's degree in computer science, electrical engineering, or related technical field plus demonstrated competences and technical proficiencies typically acquired through 0–3+ years of experience.
Strong understanding of cybersecurity principles and practices.
Strong understanding of software cybersecurity activities such as static analysis, dynamic analysis, and fuzz testing.
Experience with software analysis tools such as CodeQL, libfuzzer, honggfuzz, UBSan, and ASan.
Experience using programming languages such as C and C++.
Proficiency in recognizing software/hardware weaknesses and security vulnerabilities.
Knowledge of Unix-like operating systems and software.
Knowledge of computer networking protocols, network security principles, and practices.

Benefits

A competitive compensation package that includes a bonus component and stock options
100% paid medical, dental, and vision premiums for full-time employees
401K plan with a 6% employer match
Flexibility in schedule and generous paid vacation (available immediately after start date)
Company-wide holiday office closures
AD+D and Life Insurance

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

static analysisdynamic analysisfuzz testingsoftware analysis toolsCC++recognizing software weaknessessecurity vulnerabilitiesUnix-like operating systemscomputer networking protocols

Soft Skills

collaborationtrainingcommunication