About the Role
Development experience in C#, C++ or Java preferred but not required
Embedded system, firmware and IoT security preferred but not required
Offensive Security Certified Professional (OSCP), Offensive Security Certified Expert (OSCE) or Offensive Security Web Expert (OSWE) certification preferred but not required.
Cloud security experience preferred
Travel up to 10% domestic and international
Requirements
The Product Security Engineer is responsible for creating and implementing cutting-edge security solutions and infrastructures that will ensure our client products are secure and resilient.
This role provides the opportunity to work cross-functionally with a variety of stakeholders including product development teams and contribute to product security deliverables and activities
Support developers of our business units in their SDLC and provide guidance regarding mitigations to emerging threats and remediation planning.
Participate in building security champions within product and R&D teams and to help mature their secure development lifecycle practices.
Collaborate effectively with cross functional teams including, R&D Quality, Manufacturing and Regulatory to achieve security risk reduction.
Develop security training and deliver to internal development teams and other stakeholders.
Evaluation of new security tools and technologies and build internal tools as needed.
Perform security tools integration such as Static Code Analysis (SAST), Software Composition Analysis (SCA) and Dynamic Application Security Testing (DAST) tools.
Other duties and responsibilities as required to support the changing security needs of the organization.
Have knowledge of industry standards and frameworks such as OWASP, NIST, SANS, MITRE ATT&CK, etc.
Strong interpersonal and communication skills
Strong technical writing and presentation skills
About the Company
At AMD, we are dedicated to safeguarding our client against cyber threats. We recognize the distinct requirements and vulnerabilities of each enterprise, which is why we offer tailor-made solutions to shield your data and assets effectively.
Our collaborative approach involves working closely with clients to devise a holistic cybersecurity strategy that harmonizes with their specific business objectives.