Principal Security Software Engineer

About HP Wolf Security

HP Wolf Security innovates endpoint protection by embedding security into hardware, firmware, and software layers of modern PCs. Our solutions secure millions globally by employing advanced isolation and cloud-connected technologies.

Role Overview

As an integral member of the HP Wolf Security R&D team, you will spearhead enhancements to secure software development practices ensuring compliance with the European Union Cyber Resilience Act (CRA). You will facilitate security-by-design approaches, vulnerability management, software assurance, and provide technical evidence demonstrating robust security controls through collaboration with cross-functional teams including software engineering, product security, quality, and compliance.

Key Responsibilities

• Drive the creation and implementation of improvements to the secure software development lifecycle aligned with CRA standards.
• Introduce and optimize static analysis tools, integrating them efficiently into build and development workflows, tuning detection rules, and assisting teams in addressing identified issues.
• Develop methodologies for triage of findings, managing false positives, monitoring remediation efforts, and quantifying security enhancements.
• Advocate security-by-design and secure-by-default through threat modeling, design assessments, architectural guidance, and enforcing secure coding standards.
• Enhance processes for identifying, assessing, documenting, and fixing vulnerabilities at all phases of software development.
• Provide expert technical leadership on challenging security issues, evaluate engineering trade-offs, and mentor engineering staff through constructive code reviews.

Candidate Profile

• Extensive experience with creating, securing, and sustaining production software, preferably in endpoint security, systems software, or security-sensitive environments.
• Proficient in programming languages such as C, C++, Rust, Python, PowerShell, or similar.
• Hands-on experience in software development for Windows and/or Linux platforms, especially in operating systems, virtualization, isolation, or security-critical components.
• Strong background in code review, debugging, unit and integration testing, as well as modern build, CI, and release pipelines.
• Practical knowledge with selection, integration, configuration, and improvement of static analysis tools, including addressing their findings.
• Skilled at navigating complex codebases and driving enhancements to software quality, reliability, and security.

Preferred Qualifications

• Familiarity with secure software development lifecycle activities, including threat modeling, secure design, vulnerability management, and governed releases.
• Experience handling vulnerability disclosure, severity analysis, remediation strategies, and coordinating security patches.
• Proven ability to lead technical projects and influence teams without formal direct reporting lines.
• Excellent communication skills with a collaborative and pragmatic work style.

Work Location and Environment

This position is located at HP’s Cambridge office with a hybrid working model requiring a minimum of three onsite days weekly. The role emphasizes frequent in-person collaboration. The office offers modern ergonomic workspaces and well-equipped kitchen facilities featuring a wide coffee selection.

Additional Information

HP Wolf Security is a central pillar of HP's PC market strategy, embedding enterprise-grade protection into hardware, firmware, and software. The innovative micro-virtualization technology isolates user tasks within micro-VMs, providing robust defense against evolving cybersecurity threats including polymorphic and zero-day malware. This technology originated from Bromium, acquired by HP in 2019, forming HP Wolf Security.

HP Inc is an equal employment opportunity employer, committed to fair hiring practices regardless of race, gender, age, disability, or other protected characteristics. Applicants are assured privacy and non-discrimination in the recruitment process.