Job Description

Description

Position at Wind River

Wind River

In a world increasingly driven by software innovation, Wind River is pioneering the technologies to accelerate the digital transformation of our customers with a new generation of Mission Critical AI Systems, in a machine-driven economy, with the most exacting standards for safety, security, performance, and reliability.

Wind River Studio is enabling our customers across industries to build intelligent systems using cloud-native development tools and processes to transform and optimize their device life cycle across Development, Deployment, Operations, and Servicing.

Why Choose Wind River?

For almost 40 years, Wind River has been the leading provider of embedded operating systems to the world\'s leading developers of mission-critical infrastructure. Our customers include top Global 1000 companies across industries: Aerospace and Defense, Telecommunications, Industrial Controls and Robotics, Automotive, and Medical. Our VxWorks RTOS, Linux, and Helix Virtualization Platform power 2 billion-plus devices worldwide.

Within WindRiver, we have an opportunity to work with large-scale cloud native projects like Kubernetes, Docker and fast-paced open-source technologies. Wind River has adopted these technologies into the core of our product, which is driving us to find experienced and high-performing individuals that can learn and contribute towards secure development practices and securing these container and virtualization solutions.

What You\'ll Do

WindRiver Systems is seeking an experienced high-performing professional, developing security services and offerings that spans across all products.

As the industry is moving intelligence to the Edge, this introduces challenges to protect the Edge from threats and vulnerabilities. The successful candidate will join a highly skilled Security Services team focused on implementing modern DevSecOps technologies, pioneering new security tools, processes and capabilities for cloud-native solutions.

The candidate must have experience in securing cloud-native development environments and be a highly adaptable team player who can quickly ramp up on new technologies and accomplish goals in a fast-paced agile environment. A combination of strong technical and communication skills is a must, along with an unbounded desire to learn new technologies and their application.

Who You Will Work With:

In Cloud and Security Services org, with primary focus on Cloud Infrastructure Orchestration and Security implementation you will work with Production Engineering, Software Development, QA and our Customer-facing teams to ensure requisite levels of infrastructure, application and software security/quality.

Responsibilities:

• Secure OnPrem and Public Cloud environments leveraging IAC
• Establish, implement security policies for Docker, K8s and Public Cloud Platforms
• Implement and automate Application Security policies by embedding SAST and DAST in development workflow
• Accelerate container security with pipeline development
• Drive vulnerability management and remediation in partnership with various product teams
• Manage and maintain secure integrations between tools like Gitlab, Jenkins, JIRA, and many more.
• Lead efforts to install, configure and utilize hardware security modules (HSM)
• Implement solutions for event log collection and SIEM.

Minimum Qualifications:

• 2+ relevant experience in cybersecurity principles, and trends with a desire to increase knowledge and strong analytical skills.
• Expertise in security features in cloud providers (Azure AWS, GCP etc.), On Prem and Hybrid environments.
• Experience with TLS protocol, its cipher suites, and enabling TLS mutual authentication
• Expertise using tools like Coverity, BurpSuite, ZAP, Trivy, PRISMA Cloud, Tenable, Rapid7 etc.
• Vulnerability Management and reporting
• Data Security and Posture Management
• Good knowledge of DevSecOps principles and implementations
• Kubernetes, Docker and Harbor
• Infrastructure as Code including Terraform and Helm
• Excellent programming skills in a Linux environment in one or more of Python, Go etc.
• Experience with Agile and Scrum
• Self-managed, fast learner, and strong problem-solving skills.
• Excellent verbal and written communication skills and a good listener.
• Exceptional team player who works well in collaborative situations.
• Ability to brainstorm and represent competing ideas simultaneously.
• Growth mindset who is passionate about learning and applying new technologies.
• BE / MTech degree (Computer Science, Electronics Engineering, or equivalent technical degree).

#LI-CK-1

Wind River is an Equal Opportunity Employer with a commitment to diversity. We prohibit discrimination based on race, color, religion, gender, national origin, age, disability, veteran status, marital status, pregnancy, gender expression or identity, sexual orientation or any other legally protected status.

Diversity is foundational for Wind River\'s business success. We want to be a workplace of choice for all people and we value the unique perspectives offered by a diverse workforce. Wind River does not unlawfully discriminate on the basis of race, color, religion, sex, sexual orientation, gender identity or expression, national origin, citizenship, disability, protected veteran status, age, ancestry, medical condition, genetic information, marital status, pregnancy, or any other legally protected status. This principle applies to all areas of employment: recruitment and hiring, training, performance evaluations, promotions and transfers, compensation and benefits, and social and recreational programs.

Wind River desires to be an employer of choice with an inclusive environment for all individuals. As part of this goal and in compliance with various laws and regulations, Wind River provides reasonable accommodation to applicants and employees. Requests for reasonable accommodation for applicants and employees are examined on a case-by-case basis. Please let us know if you need a reasonable accommodation for any part of the application, interviewing, hiring or at any other time during the employment process. You can email us at: . Please do not include personal medical information in the email.

Wind River