Product Security Engineer
Location: US - Remote
Our Team:
Semtech’s Product Security team is a group of passionate and talented security professionals tasked with supporting product development teams in the creation of high-quality products that are secure by design. We ensure our customers and partners feel comfortable deploying our products, knowing security is an integral part of the development process. We are expanding a versatile and exceptionally talented team of individuals to make this vision a reality
Job Summary:
The Product Security Engineer will assist in supporting Semtech’s Business Units with product security initiatives. The ideal candidate will help create high-quality security-focused products by providing product development teams with the necessary support, requirements validation, tools, training, and assistance
Responsibilities:
Assist in the development of product security requirements for applications, infrastructure, cloud, and other products.
Help assess and develop threat models and provide recommendations for product security and resilience.
Support the design and implementation of security solutions for various business units.
Conduct manual and automated security testing to discover vulnerabilities.
Learn and assess new Semtech technologies/products from a security perspective.
Assist in evaluating cloud architectures, configurations, and processes.
Support collaboration and knowledge sharing across the organization.
Help build relationships between business units and key stakeholders to gather necessary inputs.
Assist with ISO certifications, contributing to compliance efforts.
Participate in incident management activities and implement corrective measures.
Provide guidance on security best practices for the cloud, applications, and infrastructure.
Support the research and implementation of secure encryption and protection mechanisms.
Assist in penetration testing activities to identify and address security vulnerabilities.
Help design and adopt security measures in IoT products and components, including protocols such as TLS, SSH, and Lightweight M2M.
Minimum Qualifications:
Bachelor’s degree in computer science, a related field, or relevant work experience.
1-3 years’ experience in information/cyber security with an emphasis on product security.
Basic understanding of embedded hardware systems and their security considerations.
Knowledge of cryptographic standards and their application in product security.
Familiarity with major cloud platforms (especially AWS) and cloud-native technologies.
Understanding of common security threats and vulnerabilities.
Strong analytical and problem-solving skills.
Certified Information Systems Security Professional (CISSP) or willingness to obtain certification.
Desired Qualifications
AWS Certified Cloud Practitioner
AWS Certified Solutions Architect
Basic understanding of TOGAF enterprise architecture framework
Background in software development, proficient in Python, C++, and Java.
The intent of this job description is to describe the major duties and responsibilities performed by incumbents of this job. Incumbents may be required to perform job-related tasks other than those specifically included in this description.
All duties and responsibilities are essential job functions and requirements and are subject to possible modification to reasonably accommodate individuals with disabilities.
We are proud to be an EEO employer, M/F/D/V. We maintain a drug-free workplace.
A reasonable estimate of the pay range for this position is $103,000 - $147,000. There are several factors taken into consideration in determining base salary, including but not limited to: job-related qualifications, skills, education and experience, as well as job location and the value of other elements of an employee’s total compensation package.
