Software Engineer at Supermicro – San Jose, California, United States

Vacancy ID: 25133

About Supermicro:

Supermicro® is a Top Tier provider of advanced server, storage, and networking solutions for Data Center, Cloud Computing, Enterprise IT, Hadoop/Big Data, Hyperscale, HPC, and IoT/Embedded customers worldwide. We are the #5 fastest growing company among the Silicon Valley Top 50 Technology Companies. Our unprecedented global expansion has provided us with the opportunity to offer a large number of new positions to the technology community. We are looking for talented, passionate and dedicated engineers, technologists, and business leaders to join us.

Job Summary:

We are looking for a Software Engineer to join our team and jointly ensure the security of websites or software applications used by our customers. As a Software Engineer, you will be responsible for performing website/application code scans, vulnerability assessments and penetration tests. In addition, you will be responsible for investigating security vulnerabilities reported by customers or announced in global security incidents. You will be required to respond to such customer security questions in a timely manner with investigation results and proposed mitigations.

Essential duties and responsibilities:

Includes the following essential duties and responsibilities (other duties may be assigned):

• Perform vulnerability assessments: Identify and assess vulnerabilities in computer systems, networks, and applications using a variety of methods, including automated tools and manual testing
• Security Support: Investigate and respond to customer-reported PoC security issues or global security incidents involving vulnerabilities in a timely manner
• Penetration Testing: Perform ethical hacking and simulate cyber attacks to identify and exploit vulnerabilities, with a focus on unauthorized access, privilege escalation, and data breaches
• Security Analysis: Analyze and evaluate security risks and propose mitigations, taking into account industry best practices and compliance requirements.
• Report Generation: Prepare detailed and comprehensive reports describing vulnerabilities, potential impacts, and remediation recommendations
• Collaboration: Work closely with IT and security teams to understand the organization’s infrastructure, applications, and security controls. Provide guidance on security best practices
• Stay informed: Stay up to date on the latest cybersecurity threats, vulnerabilities, and industry trends. Continuously update skills and knowledge to adapt to changing security landscapes.
• Tool Evaluation: Evaluate and utilize various penetration testing tools and frameworks to improve testing efficiency and effectiveness. Research and Development: Engage in ongoing research to develop new techniques, tools, and methodologies to improve penetration testing capabilities and stay ahead of emerging threats.

Qualifications:

• Education: A bachelor’s or master’s degree in computer science, information technology, cybersecurity, or related fields
• Any security certifications: CEH, OSCP, CISSP, GPEN, ECSA or other certificates of participation or course certificates related to information security
• Skills: Proficient in various operating systems (Windows, Linux, Unix, etc.), knowledge of networking protocols and technologies, programming and scripting skills, skills in testing security of web applications, skills in testing security of wireless networks, familiarity with penetration testing tools (e.g. Metasploit, Burp Suite, Nmap)
• Experience: 3+ years of experience performing penetration testing, understanding security vulnerabilities and exploitation techniques, and knowledge of security best practices and standards
• Communication Skills: Ability to effectively communicate findings to technical and non-technical stakeholders and strong report writing skills to document test results and recommendations
• Ethical standards: Adherence to a strict code of ethics and a commitment to conduct testing in a lawful and responsible manner.

Please note that this position requires regular office attendance. The successful candidate will be expected to be in the office during standard working hours as determined by the company. Collaboration in the office and participation in team meetings, training sessions and other on-site activities are essential aspects of this position. Candidates must be mindful of commuting distances and be prepared to fulfill their responsibilities at the designated office location.

Salary range

$101,000 – $160,000

The salary offered will depend on several factors, including your location, level, education, training, specific skills, years of experience, and comparison to other employees already in the role. In addition to a comprehensive benefits package, candidates may be eligible for other forms of compensation, such as participation in bonus and stock incentive programs.

EEO Statement

Supermicro is an equal opportunity employer and embraces diversity in our employee population. Supermicro’s policy is to provide equal opportunity to all qualified applicants and employees without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, protected veteran or special disabled veteran status, marital status, pregnancy, genetic information, or any other legally protected status.