Application Security Engineer

Vizio Group - Dallas, TX

Full-time

Dallas, TX

Furniture, Home Furnishings, Electronics, and Appliance Retailers

About the position

As an Embedded Systems Security Engineer at VIZIO, you will play a crucial role in securing embedded platforms, DevOps pipelines, and infrastructure. This position involves collaborating with various teams to develop systems and procedures that counteract security threats in cloud and embedded environments. The ideal candidate will be a detail-oriented problem solver who stays updated on the latest security trends and technologies.

Responsibilities

• Design and support implementation of secure embedded systems for IoT devices
• Conduct security assessments and vulnerability testing on embedded systems and upstream services
• Integrate security into the software development lifecycle (SDLC) by participating in code reviews, threat modeling, and secure design discussions
• Implement tooling to support secure CI/CD practices
• Trace vulnerabilities from client to upstream services
• Collaborate with cross-functional teams to ensure best security practices are followed
• Develop and implement Standard Operating Procedures
• Document findings, risk, impact, and ensuing mitigation strategies
• Provide technical expertise in executing risk management activities such as disaster recovery, continuity of operations, and incident response
• Stay abreast of the latest security threats and trends

Requirements

• 5-10 years of experience within a SOC (Security Operations Center), Cloud Platform engineer, Systems Engineer, Cyber Security Engineer, or equivalent experience
• 2 years of experience performing dynamic security assessments and tests against firmware, software, applications, and/or IoT devices
• Experience with Kali Linux toolsets, Burp (or Zap), and vulnerability scanners
• Experience with embedded systems development and security
• Knowledge of secure coding practices and cryptographic algorithms
• Strong understanding of networking, ports and protocols, and the TCP/IP stack
• Ability to articulate and explain complex security concepts to both technical and non-technical stakeholders
• Bachelor's degree in IT, Computer Science, Computer Engineering, or a related discipline
• Cyber related certifications such as CISSP, CEH, OSCP