Senior Security Software Engineer – Developer

🕒 6 dias atrás

🌐 Canadá, Estados Unidos – Remoto

🇨🇦 Canadá – Remoto 🇺🇸 Estados Unidos – Remoto (EUA)

⏰ Tempo Integral

🟠 Sênior

🧑‍💻 Engenheiro Full-stack

👻 Score fantasma 10%

O que significa: a chance de ninguém estar realmente contratando para esta vaga.Como ler: 60% ou mais significa que achamos que é uma vaga fantasma. Pontuações mais baixas preocupam menos.Por que essa pontuação:

• Aberta há 6 dias.
• As vagas desta empresa costumam ser preenchidas em 45 dias.
• Sem salário divulgado.

Candidatar-se

Adaptar currículo + carta de apresentação

Encontrar Vagas Remotas Similares

☆ Salvar☑️ Marcar como candidatado❌ Ocultar

Reportar problema

Vecima Networks Inc.

SiteLinkedInTodas as Vagas

501 - 1000 funcionários

Fundada em 1988

📡 Telecomunicações

🔧 Hardware

📱 Mídia

Telecommunications • Hardware • Media

A Vecima Networks Inc. é uma fornecedora global de software escalável, serviços e plataformas de tecnologia integradas para acesso de banda larga, entrega de conteúdo e telemática de frotas. A empresa projeta e fornece hardware (nós remotos PHY/RPD, OLTs, plataformas de acesso) e software nativo em nuvem (gerenciamento de acesso/nuvem Entra, streaming MediaScale, CDN e caching) para operadores de redes de cabo e fibra, permitindo acesso multigigabit, entrega de vídeo e automação operacional. A Vecima também oferece serviços profissionais, suporte e serviços de implantação para ajudar os provedores de serviços a implementar e gerenciar soluções de acesso e distribuição de conteúdo convergentes.

Descrição

• Identify and reduce security risk throughout the product lifecycle • Lead threat modelling for products, features, and architecture changes • Identify assets, trust boundaries, attack surfaces, abuse cases, attack paths, and security controls • Review product architectures and security-sensitive designs • Translate security risks into engineering requirements, implementation guidance, verification plans, and actionable development work • Provide practical security leadership to software teams • Coach developers and architects in secure design, secure coding, threat modelling, and security testing • Improve secure product development through risk-based activities, release criteria, reusable guidance, templates, security reviews, and automated CI/CD checks • Help teams apply defense in depth, least privilege, secure-by-default behavior, and appropriate isolation boundaries • Support SBOM generation, validation, completeness, release integration, and disclosure using CycloneDX and related standards • Perform CVE monitoring and triage • Support vulnerability assessment, remediation, disclosure, customer communication, and PSIRT practices • Lead the Product Security contribution to the organization’s ISO/IEC 27001 ISMS • Lead customer engagement involving security reviews, questionnaires, contractual requirements, and audits • Work with Software Architects, Developers, Product Management, Compliance, and service provider customers • Design, build, test, release, and maintain well-secured products

🎯 Requisitos

• 5+ years of professional software engineering, security engineering, or combined experience • Significant hands-on experience securing production software • Experience with Linux, source control, code review, build systems, CI/CD, automated testing, and modern software development practices • Ability to understand production software at source-code level and work with developers on security-sensitive changes • Programming ability in at least one relevant language, such as C, C++, Python, Go, Java, JavaScript/TypeScript, or Rust • Experience applying Product Security or Application Security practices within a software development organization • Strong understanding of secure software design, common vulnerability classes, attack techniques, and defensive controls • Practical threat modelling experience using STRIDE, attack trees, abuse cases, or an equivalent risk-based approach • Experience reviewing software or system architectures from a security perspective and translating risks into engineering requirements • Experience investigating vulnerabilities and determining technical impact, exploitability, affected components, and mitigations • Experience with SBOM and software composition analysis tools and familiarity with CycloneDX • Working knowledge of software dependencies, vulnerability databases, software supply-chain risk, and vulnerability remediation • Understanding of how software is built, packaged, released, deployed, and maintained in production • Ability to explain complex technical security risks to developers, architects, product leaders, auditors, and customers • Sound engineering judgement balancing risk reduction with product constraints, delivery requirements, reliability, performance, and maintainability • Ability to lead through technical credibility, collaboration, coaching, and influence • Comfortable working across multiple engineering teams • Comfortable developing and leading customer presentations and collaborative technical engagements • Nice-to-have experience with embedded Linux or Linux-based product development • Nice-to-have experience with networking products, telecommunications, distributed systems, or cloud-connected appliances • Nice-to-have experience with secure boot, trusted execution, hardware-backed identity, cryptographic key management, signed software updates, or device lifecycle security • Nice-to-have experience with vulnerability reproduction, SAST, DAST, fuzzing, penetration testing, binary analysis, reverse engineering, or runtime security analysis • Nice-to-have familiarity with CycloneDX VEX, CSAF, SPDX, purl, CPE, CVE, CVSS, CWE, CISA KEV, vulnerability disclosure, PSIRT, ISO/IEC 27001, NIST SSDF, OWASP SAMM, or IEC 62443 • Relevant security or software certifications are nice to have

🏖️ Benefícios

• Privacy protection throughout the recruitment process • Phone/video interviews • Technical/skills assessments if applicable • In-person or final interviews • Professional references and employment or education verification • Onboarding preparation, orientation, and first-day support

📊 Verifique sua pontuação de currículo para esta vaga

Melhore suas chances de conseguir uma entrevista verificando sua pontuação de currículo antes de se candidatar.

Enviar Currículo