Device Security Engineer, SD-WAN Hardware

Carrier and enterprise customers buy SD-WAN devices and management software that, until now, has relied mostly on external assessments for security coverage. This role adds dedicated internal ownership of product security for that hardware line, sitting inside the security team with a hybrid schedule out of the London office.

Responsibilities include reviewing new features for security gaps before release, coordinating with an external penetration-testing firm on the annual assessment so findings actually get tracked and closed, and helping triage vulnerability reports that arrive through customer channels. The role inherits a backlog of roughly a dozen findings from the most recent external assessment, several touching firmware update verification, and working through it is one of the first deliverables.

Required: threat modeling and network security fundamentals, working Python for tooling and scripts, and comfort reading code during review rather than only reports. Three to five years of relevant security or software experience fits this opening well. Deep firmware reverse-engineering skill is not required; the external assessment firm covers that depth, and this role coordinates and triages rather than duplicating it.

Hybrid, with regular time in the London office alongside the hardware team this role coordinates with most closely; coordination happens informally today, mostly over chat. Reports to the head of product security, working day-to-day with the hardware team and the external penetration-testing firm's lead tester on a more structured review checkpoint.