Security Engineer

Job description

**About Position:** We are seeking a Senior C/C++ Security Engineer with deep expertise in 5G RAN software development, vulnerability remediation, and Linux-based systems programming. The ideal candidate will be responsible for analyzing, triaging, and fixing software vulnerabilities identified by automated security scanners within 5G gNB solutions while ensuring compliance with telecom standards, maintaining system performance, and preserving platform stability. - **Role: Security Engineer** - **Location: Bengaluru** - **Experience: 5 to 8 Years** - **Job Type: Full-Time Employment** **What You'll Do:** - Analyze and remediate software vulnerabilities reported by automated security scanners across 5G gNB solutions. - Investigate security findings, assess risk levels, and prioritize remediation activities. - Design, develop, test, and deploy secure software fixes while minimizing impact on system performance. - Perform root cause analysis of security defects and implement sustainable corrective actions. - Utilize Coverity and similar static analysis tools to identify, interpret, triage, and resolve code defects. - Review source code for security vulnerabilities, memory safety issues, concurrency problems, and coding standard violations. - Collaborate with architecture, development, QA, and integration teams to validate fixes and prevent regressions. - Ensure remediation activities align with telecom standards, product requirements, and software quality guidelines. - Analyze system behavior, debug complex software issues, and trace data flows across protocol layers. - Implement secure handling of untrusted external inputs and interface data. - Contribute to secure coding practices, code reviews, and security-focused development processes. - Support product releases, defect resolution, and long-term security improvement initiatives. - Maintain low-latency and high-performance characteristics of 5G network software while implementing security enhancements. **Expertise You'll Bring:** - 5 to 8 years of experience in C/C++ software development on Linux platforms. - Expert-level proficiency in C and C++ programming. - Strong understanding of Linux operating system internals and systems programming concepts. - Deep knowledge of secure coding practices, memory safety, buffer management, and software hardening techniques. - Strong expertise in multithreading, synchronization mechanisms, concurrency control, and IPC (Inter-Process Communication). - Experience analyzing and fixing vulnerabilities identified by static and dynamic security analysis tools. - Hands-on experience with Coverity, Fortify, SonarQube, Klocwork, Polyspace, or similar code analysis tools. - Strong debugging and troubleshooting skills for complex software systems. - High-level architectural understanding of 5G RAN systems, including CU/DU architecture and functional splits. - Strong knowledge of 5G protocol stack and telecom networking concepts. - Experience working with RRC, NGAP, XnAP, PDCP, RLC, MAC, and related protocol layers. - Ability to trace data flows across distributed telecommunications systems and identify security risks. - Experience patching complex defects while ensuring functional correctness and performance optimization. - Knowledge of software vulnerability management, CVE remediation, and secure software development lifecycle practices. - Understanding of telecom standards, reliability requirements, and carrier-grade software development. - Experience with source code management, CI/CD pipelines, automated testing, and quality assurance processes. - Strong analytical, problem-solving, and root cause investigation skills. - Excellent communication and collaboration skills with cross-functional engineering teams. - Experience with 5G gNB product development. - Familiarity with O-RAN architecture and interfaces. - Knowledge of cybersecurity standards applicable to telecom systems. - Experience with fuzz testing, threat modeling, and vulnerability assessment methodologies. - Exposure to embedded systems and real-time telecom platforms. - Understanding of performance tuning, profiling, and low-latency software optimization techniques. **Benefits:** - Competitive salary and benefits package - Culture focused on talent development with quarterly growth opportunities and company-sponsored higher education and certifications - Opportunity to work with cutting-edge technologies - Employee engagement initiatives such as project parties, flexible work hours, and Long Service awards - Annual health check-ups - Insurance coverage: group term life, personal accident, and Mediclaim hospitalization for self, spouse, two children, and parents **Values-Driven, People-Centric & Inclusive Work Environment:** Persistent is dedicated to fostering diversity and inclusion in the workplace. We invite applications from all qualified individuals, including those with disabilities, and regardless of gender or gender preference. We welcome diverse candidates from all backgrounds. - We support hybrid work and flexible hours to fit diverse lifestyles. - Our office is accessibility-friendly, with ergonomic setups and assistive technologies to support employees with physical disabilities. - If you are a person with disabilities and have specific requirements, please inform us during the application process or at any time during your employment **Let’s unleash your full potential at Persistent - persistent.com/careers** ***“Persistent is an Equal Opportunity Employer and prohibits discrimination and harassment of any kind.”***