Security Software Engineer, Security Protocols – Foundations

This is a fully remote position, open to applicants in United States.

📋 Description

• Create and implement security components for both existing and innovative streaming protocols aimed at large-scale content distribution.

• Collaborate with business and product stakeholders to convert objectives into security requirements, technical designs, and implementations.

• Develop and maintain unified application security components across various delivery pathways.

• Enhance the performance and resource efficiency of cryptographic and transport security layers on Open Connect appliances.

• Design and implement host-side DoS resilience strategies and mitigations, including kernel integration to manage abusive traffic.

• Work alongside adjacent teams to ensure comprehensive infrastructure protection.

• Conduct research on vulnerabilities and develop mitigation strategies for application- and protocol-level vulnerabilities across the Open Connect platform.

• Act as the security lead for Open Connect protocols and their cryptographic foundations.

• Engage with partner organizations and participate in cryptography and security communities.

• Adapt to and learn from evolving architectures and features.

• Define and independently manage cross-functional projects from initial ambiguous inquiries to production.

• Promote collaborative efforts and take ownership of projects from their inception through to production.

⛳️ Requirements

• Proven history of architecting and implementing security features that significantly enhance system security.

• In-depth, hands-on experience with applied cryptography, security protocols, and techniques, including TLS, DTLS, QUIC, signatures, key management, and AEAD.

• Experience in designing, developing, and deploying end-to-end security controls from architecture to production.

• Successful track record of cross-functional collaboration to improve security posture.

• Ability to define and manage cross-functional projects driven by ambiguous questions independently.

• Capability to translate business and product objectives into security requirements, technical designs, and implementations.

• Self-motivated, curious, and willing to ask questions.

• Quick learner with an enthusiasm for new technologies.

• Experience in designing mitigations for DoS/resource exhaustion for high-scale services.

• Contributions to OpenSSL or similar cryptographic libraries, or to security protocol standards.

• Active involvement in IETF, CFRG, or Real World Crypto.

• Experience in securing live streaming or media delivery protocols.

• Familiarity with highly distributed systems and fuzzing complex systems.

• Experience in securing FreeBSD and Linux environments.

• Proficiency in C, Golang, and Python programming languages.

🏝️ Benefits

• Health Plans

• Mental Health support

• 401(k) Retirement Plan with employer match

• Stock Option Program

• Disability Programs

• Health Savings and Flexible Spending Accounts

• Family-forming benefits

• Life and Serious Injury Benefits

• Paid leave of absence programs

• Full-time hourly employees accrue 35 days annually for paid time off to be used for vacation, holidays, and sick leave.

• Full-time salaried employees are immediately entitled to flexible time off.