Sr. Software Engineer- Product Security - Artech LLC

Senior Software Engineer with focus on Product Security
Location: Onsite in North Reading, MA
Duration: 6- 12 month contract
Schedule: 40 hours per week; M-F

As a Senior Product Security Software Engineer in the Production Board Test group, you will join our global team developing creative and innovative software solutions supporting our in-circuit test equipment. As a Senior Product Security Software Engineer, you will assist in reducing risks and addressing vulnerabilities to provide more secure products and software solutions. Your experience and skill set will play a key role in our efforts to develop, deploy, and maintain a secure platform that tests and screens a majority of the world s electronic assemblies. We are looking for a 10+ year experienced Software Engineer with experience in Product Security to focus on our product security activities.

Responsibilities

• Lead product security risk assessments and hazard analysis
• Design and implement software security processes
• Execute software vulnerability analysis tools; analyze and implement results
• Develop and maintain product security statistics
• Build and maintain secure Windows OS hardened images
• Manage Proof of Concept activities for tool reviews
• Research and recommend security tools to work with engineering infrastructure
• Support threat modeling, secure coding, SBOM generation activities
• Interface with other technical departments such as Penetration Testing Team, Systems and Hardware Engineering

• BS in Computer Science or Computer Engineering and 10+ years of professional experience.

• Software Composition Analysis and Static Code Analysis - we are looking for a candidate that is knowledgeable and has experience with this Software security task and has used tools for it such as Veracode, Blackduck, SNYK or FOSSID.
• Penetration testing - we are looking for a candidate with knowledge of and experience with this Software security task and has used tools such as Pentera or Rapid7 for it.
• Threat Modelling - looking for a candidate with knowledge of and experience with performing threat modelling analysis on software architecture and using tools for this like the Client threat modelling tool.
• Operating System Image hardening - hardened (made Windows OS more secure from a software cyber security perspective) Windows 10 OS images.

• Knowledge and experience of Windows ASP.net web applications
• Proficient in developing with C/C++, C#, .NET framework; Object Oriented design and programming skills
• Demonstrated Expertise with MS Visual Studio Development tools and the Client Windows Platforms
• Familiarity with network protocols, programming, vulnerability management tools and security mechanisms.
• Solid understanding of software engineering processes

• Linux experience is a plus

• Comfortable working with a remote, multidisciplinary, global team
• Strong sense of team-oriented problem-solving techniques
• Good working knowledge of project estimation techniques