Security Certification Engineer

JOB DESCRIPTION

About Us

Always open. Our code, our culture, our opportunities. Leading open innovation without limits. We are SUSE.

SUSE is a global leader in innovative, reliable and secure enterprise open source solutions, including SUSE Linux Enterprise (SLE), Rancher and NeuVector. More than 60% of the Fortune rely on SUSE to power their mission-critical workloads, enabling them to innovate everywhere – from the data center to the cloud, to the edge and beyond. SUSE puts the “open” back in open source, collaborating with partners and communities to give customers the agility to tackle innovation challenges today and the freedom to evolve their strategy and solutions tomorrow.

We are open in our roots and open in our approach, striving to be the most trusted open innovator in the World. Openness extends beyond our technology. Our vibrant community thrives on diversity and connectivity without borders.

Security Certification Engineer

Job Description

SUSE is a growing company, with great products, a culture that fosters openness and friendship, and where many opportunities exist.

Product security and compliance is the most important building block of the global IT ecosystem.

SUSE has more than two decades of experience in maintaining industrial grade security and bespoke product compliance to make our products outstanding. Championing certification standards from worldwide established authorities such as ISO, NIST, BSI, allows us to respond to sophisticated and rigorous demands from our customers in the most competitive manner. The race is still on-going and we need you to stay ahead and win.

• Developing frameworks and automation tools for security certifications
• Building certified product configurations and driving their compliance throughout the cycle
• Maintaining technical requirements defined by certification bodies
• Maintaining certification testing requirements and automation
• Coordinating with production teams on implementing recommendations from certification labs
• Around 5 years of total computing experience in academia / FOSS / commercial sectors
• Scripting skills in any of Python, Bash, Perl
• In-depth knowledge of Linux OS
• Knowledge of system hardening and security concepts
• Familiarity with Jira and Atlassian tools stack
• Hands on experience of handling XML and YAML formats
• Understanding of OVAL, XCCDF, CPE data formats and feeds
• Hands-on knowledge: SCAP scanning
• Bonus knowledge: C programming
• Bonus experience: any of STIG, PCI DSS, CIS Benchmarks
• Bonus hands-on knowledge: Ansible, Salt
• Good communication level of English

• You will find and can connect to highly skilled engineers at SUSE

• We provide many different products and endless opportunities to learn

• We help our employees to develop

• We work with, support, maintain, and advocate open-source!

• You can work with and within an international team

  Our working hours are as flexible as can be any team-work from home!

• We organize regular events (hackathons, workshops, outdoor events, etc) to build up relationships and friendship within and across teams

• At SUSE the opinion of the employee matters!

  SUSE is a growing company, with great products, a culture that fosters openness and friendship, and where many opportunities exist

• SUSE has more than two decades of experience in maintaining industrial grade security and bespoke product compliance to make our products outstanding

If you are successful for this position you'll have to pass pre-employment checks before joining us. The content of these checks may vary by country.

Job

Software Engineering

What We Offer

We empower you to be bold, driving your career to create the future you want. We celebrate and reward your achievements.

SUSE is a dynamic environment that is evolving rapidly, thus requiring agility, strong entrepreneurship and an open mind.

This is a compelling opportunity for the right person to join us as we continue to scale and prosper.

If you’re a big thinker, obsessed by execution and thrive in a dynamic environment in which you can tangibly create a lasting legacy, then please