5 days ago
Base Salary
$140k - $210k/yr
Responsibilities
- Design, develop, and execute security and testing strategies for the Device OS powering Clover point-of-sale devices.
- Manage and validate PKI infrastructure, Certificate Authority lifecycles, HSMs, secure device provisioning, and key management.
- Own platform security, vulnerability management, operational quality, compliance validation, and risk assessment across Clover hardware product lines.
- Interpret PCI-PTS and PCI-PIN specifications and execute compliance, penetration testing, and risk validation workflows.
- Audit and secure CI/CD build pipelines, automated deployments, golden images, and end-to-end software supply-chain security.
- Troubleshoot embedded cryptography, TLS/mTLS, certificate lifecycle tools, and secure bootloaders.
Requirements
- 5+ years of professional experience in software security, PKI engineering, application security, or software QA/testing.
- Hands-on experience with PKI, certificate and key management, and HSMs such as Thales.
- Strong knowledge of security protocols, symmetric and asymmetric encryption, TLS/mTLS, and digital certificates.
- Experience with vulnerability management, security scanning tools, and risk assessments in Linux, Android (AOSP), or cloud/embedded infrastructure.
- Practical scripting experience with Python, PowerShell, or Bash for security automation, log extraction, and diagnostic testing.
- Familiarity with secure CI/CD pipelines, version control, and infrastructure orchestration using Jenkins, GitHub Actions, Terraform, and Jira.
- Ability to collaborate with engineering, GRC, and product teams to remediate findings.
- Preferred experience validating software or hardware against PCI-PTS, PCI-PIN, SOC 2, or ISO 27001 standards.
- Preferred exposure to BurpSuite, Metasploit, Wiz, AWS SSM, UIAutomator, adb debugging, and Logcat analysis.
- Preferred experience with supply-chain security, golden-image retention, or mass-manufacturing provisioning software.
Benefits
- On-site work Monday through Friday in Sunnyvale, California.
- Fuel Your Life wellness program, paid holidays, generous time-away policies, and employee assistance mental-health support.
- Living Proof peer-recognition program, employee resource groups, professional training, development, and internal mobility opportunities.
- Medical, dental, vision, life, and disability insurance options available from day one.
- Retirement planning, discounted shares through the Employee Stock Purchase Plan, tuition assistance and reimbursement, and paid parental, caregiver, and military leave.
About Fiserv
Fiserv builds payments and financial technology for banks, credit unions, merchants, and billers, including merchant acquiring, card issuing, core banking, and digital banking platforms. It earns revenue through transaction processing, software licensing, and managed services across POS (Clover), bill pay, ACH and card networks, and risk/compliance. The public company is headquartered in Milwaukee, trades on NASDAQ/BMV, acquired First Data in 2019, and serves clients in more than 100 countries.