Platform Security Software Engineer
Resideo Technologies, Inc.10 days ago
Belgrade, SerbiaMid Level
Responsibilities
- Reproduce, triage, and fix security vulnerabilities in C++ system services on embedded Linux controllers.
- Implement platform hardening, including least privilege, secure defaults, and compiler hardening.
- Implement and test changes to update, device identity, and token validation paths.
- Fix defects and develop endpoints, resolvers, and authorization checks in Node.js REST, WebSocket, and GraphQL services.
- Build SBOM generation, vulnerability scanning, sanitizer builds, and fuzzing into CI.
- Resolve penetration-test findings, add regression tests, and document implementation and verification.
- Participate in security-focused design and code reviews.
Requirements
- At least 2 years of professional software engineering experience with modern C++ on Linux.
- Understanding of common C and C++ vulnerability classes and hands-on experience with sanitizers, static analysis, or fuzzing.
- Working knowledge of Linux fundamentals and basic understanding of TLS, certificates, and JWT.
- Experience with automated testing and CI/CD pipelines.
- Interest in security and compliance, with willingness to learn the EU Cyber Resilience Act and NIST consumer IoT requirements.
- Clear written and verbal communication in English.
- JavaScript or TypeScript and Node.js API experience, including REST or GraphQL, GraphQL schemas, and resolvers, is valued.
- Event-driven messaging experience with WebSockets, Socket.IO, or MQTT, or Rust experience, is valued.
- Security coursework, secure coding experience, capture-the-flag participation, and familiarity with embedded Linux, Yocto, ARM, cross-compilation, security standards, or SBOM tooling are valued.
Benefits
- Health insurance through Generali Insurance for serious illness, surgical intervention, professional illness, and accident consequences.
- Fitpass or Sports Academy Kocovic sports and recreation benefits.
- English classes during working hours.
- Employee referral bonus program.
- Corporate social events and team buildings.
- Well-equipped Belgrade office with hybrid work arrangement.
- Collaboration with teams in the United States.
Tech Stack
About Resideo Technologies, Inc.
Resideo Technologies builds smart-home comfort, security, and life‑safety products for consumers and professional installers, including Honeywell Home thermostats and First Alert smoke and CO alarms. The company also operates ADI Global Distribution, a major distributor of security and low‑voltage products. Spun out of Honeywell in 2018, Resideo is headquartered in Scottsdale, Arizona and trades on the NYSE under the ticker REZI.