Senior Security and Compliance Engineer

Full-time Other-General

Senior Software Engg - Systems Job Title: Security & Compliance EngineerDesignation: Senior Software Engineer - Systems Location: Bangalore SEZ Tower E Job Summary: The Security & Compliance Engineer will be responsible for overseeing the complete security and compliance workstream within our organization. This includes threat modeling, FIPS 140-2 integration, NIST SP 800-193 firmware integrity, and the preparation of all security review packages. The role requires a specialist with a deep understanding of security protocols and compliance requirements, ensuring that all systems are secure and compliant with industry standards. Responsibilities: Conduct threat modeling and attack surface analysis for BMC firmware, including Redfish, IPMI, KVM, boot chain, and signing processes. Ensure FIPS 140-2 compliance through the integration of FIPS-validated OpenSSL in Yocto, including the selection of cryptographic modules and TLS configuration for management interfaces. Implement NIST SP 800-19...