Product Security Engineer, Hewlett Packard Enterprise

Hewlett Packard Enterprise

Location:
United States

Category:
IT - Software Development

Contract Type:
Employment contract

Salary:

101900.00 - 234500.00 USD / Year

Save Job

Apply Position

Job Description:

This role involves working primarily from home as a Product Security Engineer focusing on Federal Certifications. Key responsibilities include ensuring compliance with certification standards, consulting with developers and QA, generating documentation, and aligning with government standards. This role requires experience in software development, certification schemes, and cryptographic modules.

Job Responsibility:

Assist in the execution of Common Criteria, FIPS, and DoDIN-APL certifications across all HPE Aruba Networking product lines
Operate as a representative of HPE Aruba Networking with various accredited labs during the evaluation process
Assist in the generation of documentation (e.g. FIPS security policies, CC security targets), whether creating/editing directly or working with an external author
Provide consulting, information, and advice to developers and QA around how certification works
Attend regularly scheduled meetings with accredited labs and engineering/QA to ensure project milestones are on track
Communicate gaps and deficiencies found by accredited testing labs to the relevant engineering and product teams to ensure remediation
Monitor government standards and communicate to management and engineering when changes are made that may impact a release
Assist in the development, compliance, and maintenance of FIPS compliant cryptographic module(s).

Requirements:

BS in Electrical Engineering, Computer Science, or related technical field
Background in software engineering including C/C++, Python and/or Golang
Ability to read and understand source code in C is a must
Minimum 2 years of experience working with cryptographic modules in a technical capacity
Minimum 3 years of experience in software development of cryptographic modules
Minimum 3 years of experience with certification schemes, including Common Criteria, FIPS, DoDIN
Minimum 4 years of experience in a position handling government certifications or security testing.

Nice to have:

Relevant industry certifications such as CISSP, CSSLP, ISSEP
Ability to work largely unsupervised
Strong project management skills
Knowledge of emerging standards outside of the US, such as EUCC, EUCRA, and ITSAR.

What we offer:

Health & Wellbeing
Comprehensive suite of benefits supporting physical, financial, and emotional wellbeing
Personal & Professional Development
Programs catered to career growth
Unconditional inclusion and flexibility to manage work and personal needs.

Additional Information:

Job Posted:
June 13, 2025

Employment Type:

Fulltime

Work Type:

Remote work

View All Jobs In This Company

Job Link Share:

Product Security Engineer