Software Security Engineer

Company Description

At Western Digital, our vision is to power global innovation and push the boundaries of technology to make what you thought was once impossible, possible.

At our core, Western Digital is a company of problem solvers. People achieve extraordinary things given the right technology. For decades, we’ve been doing just that. Our technology helped people put a man on the moon.

We are a key partner to some of the largest and highest growth organizations in the world. From energizing the most competitive gaming platforms, to enabling systems to make cities safer and cars smarter and more connected, to powering the data centers behind many of the world’s biggest companies and public cloud, Western Digital is fueling a brighter, smarter future.

Binge-watch any shows, use social media or shop online lately? You’ll find Western Digital supporting the storage infrastructure behind many of these platforms. And, that flash memory card that captures and preserves your most precious moments? That’s us, too.

We offer an expansive portfolio of technologies, storage devices and platforms for business and consumers alike. Our data-centric solutions are comprised of the Western Digital®, G-Technology™, SanDisk® and WD® brands.

Today’s exceptional challenges require your unique skills. It’s You & Western Digital. Together, we’re the next BIG thing in data.

Job Description

ESSENTIAL DUTIES AND RESPONSIBILITIES:

• Educating Developers on Best Practices: Act as a subject matter expert in security principles and practices, providing guidance and training to software developers. This includes conducting workshops, seminars, and one-on-one sessions to ensure developers are well-versed in writing secure code and understanding the latest security trends and threats.
• Assessing Software Security: Perform thorough assessments of existing software systems to identify vulnerabilities and weaknesses. This involves using various tools and methodologies, such as static and dynamic analysis, to evaluate the security posture of software applications.
• Evaluating Field-Reported Vulnerabilities: Investigate and analyze security vulnerabilities reported from the field. This includes determining the severity of the vulnerabilities, understanding their potential impact on the business, and recommending remediation strategies.
• Reviewing Cryptographic Component Designs: Examine and assess the design of cryptographic components used within the organization's products. Ensure that these components are designed and implemented following best practices and industry standards to protect sensitive data.
• Incident Response and Threat Intelligence: Participate in incident response activities when security breaches occur. Collect and analyze threat intelligence to proactively identify potential security issues.
• Collaborating with Cross-Functional Teams: Work closely with other teams, such as development, operations, and IT, to integrate security into all phases of the software development lifecycle.
• Continuous Learning and Research: Stay updated with the latest security trends, vulnerabilities, and mitigation techniques. Conduct independent research to contribute to the knowledge base of the organization and the security community.

Qualifications

REQUIRED:

• Bachelor’s or Master’s degree in Computer Science, Information Security, or a related field.
• 3+ years of experience
• Relevant certifications in cybersecurity (e.g., CISSP, OSCP, CEH) are advantageous.
• Proven experience in software security, vulnerability assessment, and cryptographic systems.

SKILLS:

• Strong understanding of various programming languages and software development processes.
• Excellent analytical, problem-solving, and communication skills.

Additional Information

Western Digital is committed to providing equal opportunities to all applicants and employees and will not discriminate based on their race, color, ancestry, religion (including religious dress and grooming standards), sex (including pregnancy, childbirth or related medical conditions, breastfeeding or related medical conditions), gender (including a person’s gender identity, gender expression, and gender-related appearance and behavior, whether or not stereotypically associated with the person’s assigned sex at birth), age, national origin, sexual orientation, medical condition, marital status (including domestic partnership status), physical disability, mental disability, medical condition, genetic information, protected medical and family care leave, Civil Air Patrol status, military and veteran status, or other legally protected characteristics. We also prohibit harassment of any indiv