KT
Posted 2 days ago
Senior Security Software Engineer
Keysight Technologies
📍 Fleet
Manufacturing and Production
Job description
<p>Keysight is hiring a <strong>Senior Security Software Engineer</strong> to research, design, and build advanced <strong>binary and firmware level software composition analysis capabilities</strong> for the <strong>Keysight SBOM Manager</strong> solution.</p><p><br><br>Scroll down the page to see all associated job requirements, and any responsibilities successful candidates can expect.<br></p><p>This role focuses on identifying software components, dependencies, and security-relevant metadata from compiled artifacts where source code, package manifests, or traditional package-manager metadata may be unavailable or incomplete.</p><p><br></p><p>The ideal candidate has strong systems programming skills, experience analyzing compiled software, and the ability to develop practical automated analysis techniques that can scale into production product features.</p><p><br></p><p><strong>This is a low-level security engineering and product development role. It is not a DevSecOps, compliance, audit, or GRC position.</strong></p><p><br></p><p><strong>Responsibilities</strong></p><p><br></p><ul><li>Research and develop techniques for identifying software components in compiled binaries, firmware images, and embedded software artifacts.</li><li>Analyze compiled formats such as ELF, PE, archives, containers, filesystems, and firmware images.</li><li>Design and implement production-quality analysis engines, parsers, heuristics, and supporting services.</li><li>Build capabilities that improve SBOM accuracy, dependency identification, vulnerability mapping, and component provenance.</li><li>Evaluate open-source and proprietary tooling for binary analysis, firmware extraction, reverse engineering, and SCA workflows.</li><li>Work with product, research, and engineering teams to turn experimental analysis methods into reliable product functionality.</li><li>Document technical findings, design decisions, and implementation tradeoffs.</li><li>Mentor other engineers and contribute to a strong technical engineering culture.</li></ul><p><br></p><p><strong>Required Qualifications</strong></p><p><br></p><ul><li>Master’s degree in Computer Science, Mathematics, Computer Engineering, Cybersecurity, or equivalent practical experience.</li><li>Experience analyzing compiled artifacts such as ELF, PE, Mach-O, static libraries, shared libraries, firmware images, or embedded software packages.</li><li>Experience writing production-quality systems software.</li><li>Strong proficiency in at least one systems programming language such as <strong>Rust, C, or C++</strong>.</li><li>Hands-on experience with software dependency analysis beyond package-manager metadata, including compiled artifacts, binary inspection, firmware analysis, or static analysis.</li><li>Ability to investigate unfamiliar technical problems, form hypotheses, prototype approaches, and turn successful methods into maintainable software.</li><li>Strong debugging, technical reasoning, and problem-solving skills.</li></ul><p><br></p><p><strong>Preferred Qualifications</strong></p><p><br></p><ul><li>Experience developing in Rust.</li><li>Experience with firmware reverse engineering, vulnerability research, or embedded systems security.</li><li>Experience with automating binary analysis tasks in one of the widely used RE platforms such as Ghidra, IDA Pro or Radare2</li><li>Familiarity with software composition analysis, SBOM formats, package ecosystems, vulnerability databases, or dependency resolution.</li><li>Experience with file format parsing, archive extraction, symbol analysis, string analysis, fingerprinting, or similarity matching.</li><li>Experience designing scalable analysis pipelines or backend services.</li><li>Experience mentoring engineers, leading technical investigations, or guiding research-to-product transitions. xwzovoh </li></ul><p><br></p><p><br></p><p>Careers Privacy Statement***Keysight is an Equal Opportunity Employer.***</p>