About the Role:
We are seeking a highly skilled Radio Software Developer with a strong focus on product and production security. This role will involve working on telecom-related radio software while embedding security practices throughout the development and production processes. If you have a solid background in telecom security and are experienced with development and security scanning tools, this role could be a great fit for you.
Key Responsibilities:
- Develop Secure Radio Software: Design, implement, and maintain secure radio software solutions in the telecom sector, ensuring that security practices are integrated at every stage of the development lifecycle.
- Security Scanning & Vulnerability Management: Leverage security scanning tools such as Black Duck to assess open-source vulnerabilities and Truffle Hog to identify secrets or sensitive information within code repositories.
- Penetration Testing Support: Collaborate with security teams to analyze results from Burp Suite and other penetration testing tools, identifying security gaps and ensuring vulnerabilities are addressed early in the development process.
- CI/CD & Build Management: Manage and contribute to build environments and automation activities, using Makefiles, Gerrit (for code review), and Jenkins (for continuous integration and deployment) to streamline secure development workflows.
- Code Review & Security Best Practices: Conduct peer code reviews, ensuring that security vulnerabilities are identified and remediated in code changes before they are merged and deployed.
- Collaboration with Cross-Functional Teams: Work with various stakeholders, including product management, QA, and security teams, to ensure that security requirements are met throughout the development and production stages.
Qualifications:
- Experience: 3+ years of experience in software development, particularly in telecom or embedded systems.
- Security Expertise: A strong background in telecom security, with familiarity in tools such as:
- Black Duck (for open-source vulnerability scanning)
- Truffle Hog (for identifying secrets in code)
- Burp Suite (for penetration testing)
- Technical Skills:
- Proficiency in C/C++, Java, or similar languages for radio software development.
- Experience with Makefiles, Gerrit, and Jenkins for building, automating, and deploying secure software.
- Familiarity with secure coding practices and DevSecOps principles.
- Problem-Solving Skills: Ability to identify and address security vulnerabilities across the development cycle and recommend solutions.
- Team Collaboration: Strong communication skills with an ability to work in a cross-functional team environment.
Preferred Qualifications:
- Education: Bachelor's or Master's degree in Computer Science, Telecommunications, Electrical Engineering, or a related field.
- Certifications: Industry certifications such as CISSP, CEH, or CompTIA Security+ are a plus.