Sr Security Engineer

ph3Company /h3 /brpQualcomm Europe, Inc. Italy Branch Office /p /br /brh3Job Area /h3 /brpEngineering Group, Engineering Group Software Engineering /p /br /brh3General Summary /h3 /brpArduino's mission is to enable people to enhance their lives through accessible open-source electronics and digital technologies. Since 2005, millions of people from around the world, starting from young kids to university students and on to people involved in every imaginable profession, have been using Arduino to innovate in the fields of music, games and toys, smart homes, farming, autonomous vehicles, and many more. We are now looking for a Sr Cloud Security Engineer to join our team of expert professionals eager to share their knowledge and be part of this vibrant company's journey towards the democratization of technology. You will be responsible for ensuring the security of Arduino Software and Cloud platforms and also for fostering awareness inside the company about security best practices. Arduino is a technology-driven company, and you will have the opportunity to join a passionate and collaborative team within a multinational and driven organization. /p /br /brh3What We Offer /h3 /brul /brliA challenging career path in a rapidly growing company with a modern vision and talented teams. /li /brliA competitive salary (and benefits) that values people's skills and experience. /li /brliA young and inspiring work environment that encourages diversity and cultural exchange. /li /brliIndividual growth objectives with a dedicated budget for learning/training. /li /brliFlexible working hours and working locations; we value work-life balance! /li /brliA meaningful work opportunity in a mission-driven company committed to empowering people around the world. /li /br /ul /br /brh3And if you live near one of our offices... /h3 /brul /brliPing pong and football tournaments (sport or gym benefit is also included for everyone!). /li /brliSeasonal celebrations, happy hours, and everyday drinks and snacks at the office. /li /brliSunny rooftop lunch breaks and hamacas for relaxation and concentration. /li /br /ul /br /brh3What you'll work on /h3 /brul /brliMake sure that the data we are trusted to protect is secured to the highest standards; /li /brliHelp the Development and DevOps teams on Security Best Practices; /li /brliProvide security guidance on a constant stream of new projects and technologies; /li /brliProvide subject matter expertise on architecture, authentication and system security /li /brliDesign, implement, and manage security solutions for AWS environment through IaC technologies; /li /brliImplement and manage standard AWS security tools, including but not limited to AWS Security Hub, AWS GuardDuty, Inspector, CloudTrail, WAF, KMS, Config, IAM Access Analyzer. /li /brliBuilding secure CI/CD pipelines adopting DevSecOps principles and AI Security Agent technologies /li /brliBuild internal tools for detecting and responding to security problems and incidents /li /brliMonitor cloud environments for security incidents and anomalies, and respond to suspected incidents in a timely manner; /li /brliCollaborate with Infrastructure and Application development teams to integrate security controls in the cloud using standardized configuration tools; /li /brliWork with product development teams to implement security controls that comply with recognized regulatory, compliance, and standards such as RED, EN18031, and CRA. /li /brliMake informed prioritization decisions by assessing risk across vulnerability management activities, including CVE triage, CVSS scoring, coordinated disclosure, and collaboration with external reporters /li /brliEnsure alignment and compliance with ISO 27001 and provide definition of Security policy for all the organization, including Training of company employees on security policy. /li /br /ul /br /brh3Minimum Qualifications /h3 /brul /brliBachelor's degree in Engineering, Information Systems, Computer Science, or related field and 6+ years of Software Engineering or related work experience. /li /brliOR /li /brliMaster's degree in Engineering, Information Systems, Computer Science, or related field and 5+ years of Software Engineering or related work experience. /li /brliOR /li /brliPhD in Engineering, Information Systems, Computer Science, or related field and 4+ years of Software Engineering or related work experience. /li /brli3+ years of work experience with Programming Language such as C, C++, Java, Python, etc. /li /br /ul /br /brh3What you bring /h3 /brul /brliBachelor or Master Degree in Computer Science or related field, or equivalent experience; /li /brli5+ years of experience in security engineering or comparable experience (DevOps, SRE); /li /brliExperience in Containerisation / Orchestration with Docker and Kubernetes; /li /brliStrong, well-rounded background in host, network, and cloud security; /li /brliExperience in designing and defining secure cloud native systems; /li /brliExperience with applied cryptography including PKI, TLS, and key management; /li /brliExpertise with modern programming languages and software versioning tools (GIT/GitHub); /li /brliKnowledge of relevant security compliance, standards and regulations (e.g. ISO, SOC, NIST, GDPR, CIS, CRA); /li /brliKnowledge of internet security issues and the threat landscape (e.g. OWASP, STRIDE, MITRE ATTCK, CWE); /li /brliExperience with security monitoring, incident detection and response to suspected incidents in a timely manner; /li /brliGood experience with Vulnerability Management, Threat modeling, Risk Assessment and Risk Mitigation in cloud, web or IoT ecosystem.; /li /brliGood written and oral communication skills in English; /li /brliAbility to work with cross-functional teams (including developers, engineers, and IT) and to explain technical concepts to non-technical audiences (eg training for employees); /li /brliSkilled in problem-solving; /li /brliAnalytical skills; result-oriented and continuous learning approach. /li /br /ul /br /brh3Bonus Points /h3 /brul /brliPrevious experience working with Infrastructure and DevOps /li /brliWorking experience with cloud providers like AWS or GCP /li /brliWorking knowledge of Cloudflare, Auth0, Datadog /li /brliExperience with Arduino or other microcontrollers /li /brliExperience with hardware security /li /brliExperience with the Go programming language /li /br /ul /br /brul /brliReferences to a particular number of years experience are for indicative purposes only. Applications from candidates with equivalent experience will be considered, provided that the candidate can demonstrate an ability to fulfill the principal duties of the role and possesses the required competencies. /li /br /ul /br /brpQualcomm is an equal opportunity employer. If you are an individual with a disability and need an accommodation during the application/hiring process, rest assured that Qualcomm is committed to providing an accessible process. You may e-mail or call Qualcomm's toll-free number found here. Upon request, Qualcomm will provide reasonable accommodations to support individuals with disabilities to be able participate in the hiring process. Qualcomm is also committed to making our workplace accessible for individuals with disabilities. (Keep in mind that this email address is used to provide reasonable accommodations for individuals with disabilities. We will not respond here to requests for updates on applications or resume inquiries). /p /br /brpQualcomm expects its employees to abide by all applicable policies and procedures, including but not limited to security and other requirements regarding protection of Company confidential information and other confidential and/or proprietary information, to the extent those requirements are permissible under applicable law. /p /br /brh3Pay Range And Other Compensation Benefits /h3 /brp€57,600.00 - €86,400.00 annual (Gross)br/The above pay range reflects the broad, minimum to maximum, pay range for this job code for the location for which it has been posted. This range includes two additional months of pay as part of the annual salary. Even more importantly, please note that salary is only one component of total compensation at Qualcomm. We also offer a competitive annual discretionary bonus program and opportunity for annual RSU grants (employees on sales-incentive plans are not eligible for our annual bonus). In addition, our highly competitive benefits package is designed to support your success at work, at home, and at play. /p /p #J-18808-Ljbffr