Sr. Product Security Engineer

You know the moment. It's the first notes of that song you love, the intro to your favorite movie, or simply the sound of someone you love saying "hello". It's in these moments that sound matters most. At Bose, we believe sound is the most powerful force on earth. We've dedicated ourselves to improving it for nearly 60 years. And we're passionate down to our bones about making whatever you're listening to a little more magical.

The Bose Product Security team is looking for a talented and motivated Sr. Product Security Engineer to join its rapidly expanding team.  This individual will be focused on penetration and application security testing concentrating on pre-release products, post-release updates, and 3rd party products.  In addition, they will participate in the identification, evaluation, and selection of security tools and technologies to continually enhance Bose’s product security.

This is a phenomenal opportunity to join a growing team that will be instrumental in protecting not just products, but Bose’s most valuable asset…its customers.

About the Role - Hybrid (Tuesday, Wednesday, Thursday)

Primary Duties and Responsibilities:

• Conduct analysis and testing to verify the strengths and weaknesses of products in various environments, utilizing commercial and open-source tools.
• Develop exploits based on assessments and/or ability to make modifications on existing exploits.
• Lead and conduct penetration (Black/Grey/White Box testing) and application (DAST, IAST) security testing and assist with the development of remediation recommendations for identified finding.
• Perform other security testing tasks such as Bluetooth and wireless penetration testing, assess security risk levels in common product usage, mobile application testing, embedded device testing, and similar activities meant to identify critical weaknesses.
• Identify and clearly articulate (written and verbal) findings to stakeholders.
• Develop new security solutions/tools, including automation processes, to prevent security vulnerabilities and assist in addressing existing vulnerabilities. 

About You

Qualifications:

• 10+ years of experience with security testing, source code analysis and creating technical documents 
• Knowledge of C and/or Python
• GXPN, OSCP, OSEP, OSWE, or equivalent certification
• Experience with discovering, utilizing, and writing exploits
• Knowledge of containerization (i.e., Docker, Kubernetes) a plus
• Team player with the ability to both articulate thoughts and opinions but also listen and compromise
• Ability to champion innovation through change
• Independent, self-managed, and motivated with high integrity
• BS/MS/Ph.D. in Computer Science, Computer Engineering, Mathematics, or equivalent

Our goal is to create an atmosphere where every candidate feels supported and empowered in the interviewing process. Diversity and inclusion are integral to our success, and we believe that providing reasonable accommodation is not only a legal obligation but also a fundamental aspect of our commitment to being an employer of choice.

We recognize that individuals may have different needs and requirements based on their abilities, and we provide reasonable accommodations to ensure ideal conditions are met during the application process.

If you believe you need a reasonable accommodation, please send a note to wellbeing@bose.com

Bose is an equal opportunity employer that is committed to inclusion and diversity. We evaluate qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, genetic information, national origin, age, disability, veteran status, or any other legally protected characteristics.

For additional information, please review:

1. The EEO is the Law Poster (http://www.dol.gov/ofccp/regs/compliance/posters/pdf/OFCCP_EEO_Supplement_Final_JRF_QA_508c.pdf)
2. Its Supplements (http://www.dol.gov/ofccp/regs/compliance/posters/ofccpost.htm). Please note, the company's pay transparency is available at http://www.dol.gov/ofccp/pdf/EO13665_PrescribedNondiscriminationPostingLanguage_JRFQA508c.pdf. Bose is committed to working with and providing reasonable accommodations to individuals with disabilities.

If you need a reasonable accommodation because of a disability for any part of the application or employment process, please send an e-mail to Wellbeing@bose.com and let us know the nature of your request and your contact information.