Applied R&D Engineer 3 - SW

Family DescriptionApplied R&D (AR) consists of target-oriented research either with the goal of solving a particular problem / answering a specific question or for multi-discipline design, development, and implementation of hardware, software, and systems including maintenance support. Supplies techno-economic consulting to clients. AR work is characterised by its detailed and complex nature in order to systematically combine existing knowledge and practices to further developing and incrementally improving products, operational processes, and customer-specific feature development.

Subfamily DescriptionSoftware (SWA) comprises the definition, specification, and allocation of requirements from different sources utilising knowledge of systems engineering processes (specification & architecture). Contains processing of use case and feature requirements into conceptual models, operational scenarios, technical requirements, and functional description. Covers specification, design, implementation, and unit testing of Software (e.g. device drivers, microcode, hardware-related software & firmware) according to the requirements and architecture defined in the systems engineering process. Covers establishment and maintenance of Software Configuration Management (SCM) practices into software development projects, continuously building and integrating infrastructure tools and systems.

Good experience of 3 -8yrs in the below areas

Development/Test

• Expertise in Messaging open source softwares like Kafka, RabbitMQ and Ingress Controllers.
• Expertise in Python programming language.

Kubernetes:

• Hands-on experience with Microservices, Containers (Docker, Kubernetes, Helm, Operators), and virtualization technologies
• Expertise in CI/CD and DevOps.

Security Role:

• Experienced in secure protocols (TLS, SSH), and encryption methodologies.
• Knowledgeable in Design for Security & Privacy, Threat & Risk analysis and Security hardening practices.
• Expertise in port scanning, container and non-container vulnerability scanning, Web Application scanning, Robustness tests, DoS tests and penetration tests
• Knowledgeable in scan tools like Anchore, Tenable, Netsparker, Codenomicon, Nmap etc
• Expertise in SBOM generation would be an added advantage.

Security Role:

• Build and lead end-to-end response process forsecurityvulnerabilities inKakfa, RabbitMQ, K8S ingress controller including: analyze, and prioritizeCommon Vulnerabilities and Exposures (CVE) and collaborate with the development team todetermineand deliver theappropriate remediation.
• Run various scans like Burpp, Anchore, Malware scans, Codenomicon etc, analyze reports and map the severity appropriate as per the open source software usage.

Developer/Test Role:

• Deliver Kafka, RabbitMQ and Ingress controller as per the specification defined in CSF.