Principal Security Software Engineer
Core
Lead improvements to secure software development lifecycle processes, static analysis tool integration, and vulnerability management to meet EU Cyber Resilience Act requirements.
Role type
Principal Security Software Engineer (Process & Tooling)
Builds
Secure software development workflows, static analysis pipelines, and security assurance evidence for endpoint security products.
Domain
Endpoint security, secure software development lifecycle (SSDLC), compliance (EU CRA)
Required skills
C, C++, Rust, Python, PowerShell, static analysis tools, code review, debugging, unit and integration testing, CI/CD workflows, threat modelling, secure coding practices
Preferred skills
vulnerability disclosure, severity assessment, remediation planning, security updates, leading technical initiatives without direct authority
Technologies
C, C++, Rust, Python, PowerShell, static analysis tools
Responsibilities
Lead definition and delivery of improvements to secure software development lifecycle in line with CRA expectations; Introduce and tune static analysis tools integrated into development and build workflows; Establish approaches for triaging findings, managing false positives, and tracking remediation; Promote security-by-design through threat modelling and architectural guidance; Improve identification and remediation of vulnerabilities throughout the SDLC; Provide technical leadership and mentor engineers on complex security problems.
Seniority
Principal, hands-on IC with strategic influence
