Job Description

Job Description

Are you looking for a challenge unlike any other you've faced in your career? Come to Intel's Product Assurance and Security (IPAS) organization and join the team charged to provide leading edge awareness and frameworks for our product security assurance practices at Intel and continual improvement of our stated security assurance policies, procedures, and practices but to do it at the scale of a Fortune 50 company that delivers solutions across the entire product spectrum of hardware, firmware, and software.

Role responsibilities include:

Work with developers to determine the best ways of integrating security assurance practices into their development workflows

You will have the opportunity to contribute and innovate in emerging areas requiring security assurance

Work with stakeholders in IPAS to ensure the appropriate security assurance requirements are established in our security polices, enforced, and communicated in our security practices

Provide support to the Governance team by providing insights on the Security Development Lifecycle (SDL) quality of execution, PSE knowledge sharing and clear security assurance practices

Collaborate with engineers, consultants, and leadership to address security risks and provide mitigation recommendations within the SDL

Work with the Unified Product Development Lifecycle (uPLC) team to ensure the appropriate SDL and security requirements are embedded into the correct stages and phases of development

You may:

Respond to customer/client requests or events as they occur

Develop solutions to problems utilizing formal education, judgment and formal processes

May participate in development of intellectual property

Maintains substantial knowledge of state of the art security principles, theories, attacks and contributes to literature and conferences

Soft Skills:

Ability to work effectively in situations involving ambiguity or lack of information

Ability to independently set and achieve objectives working with others across teams and organizations

Qualifications
 

BSEE, BSCS/E or MS with 9+ years of experience working within product development with 4+ years of demonstrable product security experience:

Experience technically influencing and consulting on projects with management of competing goals

Ability to comprehend the implications of security trade-offs in the face of threats, attacks and/or vulnerabilities

Expertise with the Security Development Lifecycle in specific areas of threat modeling, security validation strategy and planning, architecture reviews, design reviews and implementation reviews.

Experience mentoring others and desire to engage technically

Preferred Qualifications:

Support as needed in threat modelling and preparation for review at the Security Architects Forum (SAFE) and the disposition of architectural issues identified

Has thorough understanding of security assurance dependencies and best practices relative to third-party (open source or 3PIP).

Understands what resources are available and capabilities that can be tapped to assist teams in closing implementation issues.

Understands what the appropriate security tools are for their domain and has functional understanding of how and when to use (static and dynamic analysis tools, fuzzing tools, register tools, etc.).

Supports, as necessary, the disposition of security issues or vulnerabilities identified.