SECURITY ENGINEER/SENIOR SECURITY ENGINEER

Harmonic is the worldwide leader in video delivery solutions, enabling media companies and service providers to deliver ultra-high-quality streaming and broadcast services to consumers globally. Through innovative SaaS platforms and software-based appliances, we are changing the way media companies and service providers monetize live and on-demand content on every screen. More information is available at www.harmonicinc.com

ROLE DESCRIPTION

We are looking for a Security Engineer to join our security team to champion security across our products and engineering organization. You will be the go-to expert for securing our applications, from the first line of code to our production cloud environment. You will have a direct impact on our security posture, embedding security best practices into our development lifecycle and protecting our platform from emerging threats. This is a chance to build, automate, and own the security function in Harmonic.
You will be reporting to the Sr. Staff Engineer, SaaS Security.

WHAT YOU WILL BE DOING:

• Comprehensive Security Testing: Lead and perform continuous security testing on our SaaS products, APIs, and underlying cloud infrastructure. This includes hands-on penetration testing, vulnerability assessments, and managing our automated testing tools (SAST, DAST, SCA).
• Targeted Security Auditing: Conduct regular security auditing of our products, development processes, and configurations against industry best practices and compliance standards (e.g., SOC 2, ISO 27001). You will also perform threat models and security design reviews for new features to ensure security is built-in from the start.
• Secure Code Review: Perform security-focused manual code reviews and provide actionable, context-aware guidance to our software development teams to remediate weaknesses.
• Security Automation: Design, build, and maintain automated security tooling within our CI/CD pipeline to provide rapid feedback to developers and effectively “shift security left.”
• Security Operations & Incident Response: Monitor, analyze, and respond to security alerts from our monitoring tools. You will be a key player in our incident response process, from initial investigation through to remediation and post-mortem analysis.
• Cloud Security Posture Management: Continuously assess and help secure our cloud environment (AWS/Azure/GCP) against common attack vectors, misconfigurations, and emerging threats.