Software Security Engineer

Duties & Responsibilities

• Assist in various application security assessment activities, including white-box and blackbox penetration testing, static code analysis, and code reviews on software products and applications.
• Assist in the implementation and integration of security measures in Software Development Life Cycle (SDLC) and DevOps pipelines, ensuring security is seamlessly woven into the development process.
• Communicate and collaborate with product development teams, providing necessary
• support for the secure development process and fostering a culture of security awareness.
• Research and propose efficient, practical, and applicable mitigation strategies to remediate identified security vulnerabilities.
• Collaborate in the development of tools for the automation and management of security
• assessment activities, enhancing efficiency and effectiveness.
• Travel up to 20%, based on business needs

Required Skills & Experience

• 3 years of experience in Application Security
• Basic understanding of cryptographic key algorithms and network security.
• Basic understanding of security fundamentals and strategies: defense-in-depth
• methodology, C.I.A. security pillars.
• Relevant programming experience in several languages: Java, C#.NET, ASP.NET, JavaScript, TypeScript, Python, Ruby, C/C++.
• Demonstrated ability to work effectively both independently and as part of a collaborative team.
• Ability to communicate effectively in English, both verbally and in writing.

Preferred Skills & Experience

• CISSP or equivalent Certifications.
• Familiarity with identifying and protecting against web application and web service security vulnerabilities, including those found in the OWASP Top 10 and CWE Top 25.
• Familiarity with security testing tools for various forms of security testing, such as static analysis, dynamic analysis, software composition analysis, and penetration testing.
• Experience in scripting languages: PowerShell, Bash, Python, etc.
• Familiarity with Azure DevOps, IoT, and container technologies.

What we offer

• Opportunity to create a more resourceful world by working on the 21st century’s biggest challenges: water, energy, and gas
• R&D center with immense growth in the heart of Budapest at Deák Ferenc square
• Cutting-edge technologies (Cloud, IoT)
• Personal development: English, soft skills, and technical training (Udemy, Pluralsight, etc.)
• Benefits: accident and life insurance, private outpatient care support, cafeteria, iPhone with a generous data allowance
• Strong culture promoting work-life balance, remote and flexibility

Depending on your experience, this role is expected to offer between 14,000,000 HUF and 21,400,000 HUF annually. We review compensation regularly to stay competitive in the market.

Itron is committed to building an inclusive and diverse workforce and providing an authentic workplace experience for all employees. If you are excited about this role but your past experiences don’t perfectly align with every requirement, we encourage you to apply anyway. In the end, you may be just who we are looking for!

The successful candidate’s starting wage will be determined based on permissible, non-discriminatory factors such as skills and experience.

Itron is transforming how the world manages energy, water and city services. Our trusted intelligent infrastructure solutions help utilities and cities improve efficiency, build resilience and deliver safe, reliable and affordable service. With edge intelligence, we connect people, data insights and devices so communities can better manage the essential resources they rely on to live. Join us as we create a more resourceful world: www.itron.com

Itron is innovating new ways for utilities and cities to manage energy and water. We create a more resourceful world to protect essential resources for today and tomorrow. Join us.

As a Software Security Engineer, you will be actively engaged in the cutting-edge field of software security fault analysis for state-of-the-art utility meters, access points, and mesh network equipment distributed globally. This role provides an opportunity to contribute to the development of security standards within a large distributed multinational corporation.