Principal Engineer - Backend Python developer

Please Note:

1. If you are a first time user, please create your candidate login account before you apply for a job. (Click Sign In > Create Account)

2. If you already have a Candidate Account, please Sign-In before you apply.

Job Description:

The elevator pitch: Why would you enjoy this new opportunity?

VMware by Broadcom is the leader in datacenter infrastructure, networking and security business, and virtualization software. We empower customers with solutions from the software-defined data center to hybrid cloud computing and the mobile workspace. We have an exciting opportunity for a Principal Engineer on our Network Detection and Research Team part of the ANS Business Unit.

Our team is responsible for the development of the network intrusion detection capabilities for the VMware vDefend Advanced Threat Prevention (ATP), a cutting-edge networking and security analytics solution for the detection and prevention of advanced threats. The team has been operating since 2014 and has built the award-winning network detection capabilities in the Lastline Defender product, now part of the NSX family. We are passionate about network detection and threat research, and combine in a single team C++ developers responsible for engine development with developers maintaining the data collection infrastructure (on top of GCP/k8s) and the development of new detection capabilities in the product. We strive to innovate and differentiate ourselves from other players in the space with a data-driven approach and a strong reliance on automation and machine learning. If you are passionate about network threat detection, and you are willing to try out new ideas and approaches in the fight against malware and advanced threats, come and join us!

Success in the Role: What are the performance outcomes over the first 6-12 months you will work toward completing?

• You will have a full understanding of the architecture of our network detection pipeline, and will be able to implement new features and take architectural calls
• You will be responsible for monitoring the production systems, and reacting to issues when they arise
• You will be intimately familiar with the usage of the Suricata IDPS, understanding its operation and the data it generates.
• The Work: What type of work will you be doing? What assignments, requirements, or skills will you be performing on a regular basis?
• You will be actively contributing to the tooling allowing us to track our coverage of threats and develop new detections. You will be dealing with large modern Python codebases, using static analysis tools to ensure your code is high quality, and writing unit tests to ensure coverage of any code line you add.
• You will be extending our existing APIs, reviewing and extending OpenAPI specs, and implementing interactions with both DBMSs and Elasticsearch clusters.
• You will be maintaining a simple UI frontend to the tooling to interact with the APIs
• You will be managing the operation of the tooling in a GCP/k8s environment, orchestrating containers using ArgoCD, monitoring operation of the tools using standard Google Cloud tooling.

Who you are:

• You are passionate about threat research and you are a methodical person comfortable in managing and analyzing large amounts of data.
• You are extremely familiar with the Python programming language, and have experience in working on large Python codebases.
• You understand k8s and Docker concepts, and you have experience at managing their deployment in Google Cloud.

Preferred qualifications

• Deep working knowledge in Python and experience at managing large Python codebases.
• Experience in writing OpenAPI specs and writing APIs.
• Good Elasticsearch knowledge, ability to write queries in ES query language.
• Some experience in simple UI development.
• Optionally some familiarity with the Suricata IDPS is welcome.

Education/Experience

• Bachelor's in Computer Science and 12+ years of experience in software development or Masters degree in Computer Science and 10+ years of experience in software development or PhD in Computer Science with a focus on computer security or machine learning welcome (coupled with 7+ years of work experience).

What is the leadership like for this role? What is the structure and culture of the team like?
The hiring manager for this role is Corrado Leita, who leads the Network Detection Research Team in the ANS Division and is based in London, UK. The team is spread acr