Security Analysis Engineer

Job Req ID: 24139

About Supermicro:

Supermicro® is a Top Tier provider of advanced server, storage, and networking solutions for Data Center, Cloud Computing, Enterprise IT, Hadoop/ Big Data, Hyperscale, HPC and IoT/Embedded customers worldwide. We are the #5 fastest growing company among the Silicon Valley Top 50 technology firms. Our unprecedented global expansion has provided us with the opportunity to offer a large number of new positions to the technology community. We seek talented, passionate, and committed engineers, technologists, and business leaders to join us.
 

Job Summary:

Supermicro is seeking a Computer System/Hardware Engineer for System/Hardware testing and benchmarking, including add-on cards and server motherboards. Computer System Analyst will also be responsible for review system capabilities, workflow, scheduling, limitations and resolve technical problems. In this role, you will have the opportunity to work closely with cross functional team members to understand business and technical requirements and derive the system requirements.

Essential Duties and Responsibilities:

1. Review security requirement baseline and analyze possible threat model for product prototype.

2. Impact analyze for specific system/software or project.

3. Proactive monitor OSS package built in system/software or project.

5. Analyze the potential security issue regarding system/software or project, and deliver possible solution to reduce security risks

4. Utilize best practices to enable secure software development lifecycle controls.

6. Enhance SSDLC practice and maintain guidance of any tools or practices required to avoid gaps in the development process

7. Drive timely and effective resolution for above security comment.

Qualifications:

1. Bachelor’s degree in computer science, information technology, or a similar field.

2. In-depth knowledge of applying ISO 27001, IEC 62443-4-1, SSDLC, BSIMM for system/software development, root cause of cybersecurity risk, and vulnerability management.

3. Experience with system/software development project for 5 years above.

4. Experience with cybersecurity analysis for system/software's DFD, STRIDE, DREAD for 2 years above.

5. Good Skill in project management and cross-division communication.

6. Capability for drawing system/software diagram.

7. CISSP, CSSLP, SSCP, CEH, CTIA or similar certification is a plus.