Lead Security Engineer
In this role you will provide software security test quality assurance support to software development teams. This role will ensure that SW scrum teams follow the defined software security development Lifecyle process and conformance to related regulations and related industry standards. As a member of the software test & QA department, you will work with the team to implement continuous improvement to the software security process, monitor the health of implemented software systems and provide guidance to scrum teams. As a key member of the software test & QA department, the individual in this role will be responsible for ensuring compliance to Dyson software security quality policies and procedures.
We work in a supportive environment where the team embraces new techniques to improve itself and grow capability. We’re looking for someone who shares this ethic, expresses a desire to develop Security test strategies across different platforms (Lighting, Environmental, Hair and Robotics). You must be aware of SW verification methodologies and techniques, ideally with a background in Security testing, comfortable with high-level design and discussions with Developers.
Key Responsibilities:
- Implementing, testing, and operating advanced software security techniques in compliance with technical reference architecture
- Perform on-going software security pen-test, code review activities to improve software security, both automated and manual to identify and exploit vulnerabilities in IOT consumer products.
- Define pen-test methodologies with a combination of automated and manual tools.
- Agree the desired Security Level with the organisation, reviewing Requirements to build Tests
- Build Automated systems to support continuous testing and analysis of nightly builds
- Contribute to the design, development, implementation, and integration of Offensive Cyber Operations tools against platforms, payloads & systems
- Proactively identify security risk, provide engineering designs for new software solutions to help mitigate security vulnerabilities
- Work in a SAFe Agile team across a global organisation
- Consult team members on software secure coding practices
- Develop a familiarity with new tools and best practices
Qualifications, skills and behaviours:
- Cyber security, including penetration, security posture assessment, cloud security assessment, IOT security, vulnerability analysis, risk assessment and so on related experience
- Experience using scan / attack / assess tools and techniques
- Competency in at least one scripting or coding language, python, C, C++
- In-depth knowledge with wireless protocols, Wi-Fi, Bluetooth. JTAG and USB
- Proficiency in Security concepts for IOT, Linux and RTOS Operating Systems
- Test Management Systems, Jira, Confluence, Stash, Git, Bamboo
- Providing critical input at all stages of design and development of a new feature
- Persistent nature, inquisitive attitude and results driven.
- Creative and product focussed ability to generate numerous concepts for new technologies
- >3 years software quality or software test relevant experience.
- Bachelor’s Degree in computer engineering / Electronic Engineering, or related fields.
- Knowledge of software in IOT products, such as embedded, app, cloud and so on.
- Experience in regulated environment, such as ISO, IEC, FDA and so on standards,
- Experience working in with Agile software development, Devops environment
- Excellent attention to detail, strong communication skill, and ability to work independently and in teams.
- Able to work in fast-paced environment and delivery quality under minimal supervision
- Able to understand software security development Lifecyle.
- Good understanding of statistical process control. Able to select, define, and apply product and process metrics and analytical techniques, and communicate results.
- Advance with CREST certified
Dyson is an equal opportunity employer. We know that great minds don’t think alike, and it takes all kinds of minds to make our technology so unique. We welcome applications from all backgrounds and employment decisions are made without regard to race, colour, religion, national or ethnic origin, sex, sexual orientation, gender identity or expression, age, disability, protected veteran status or other any other dimension of diversity.