Security Tool Integration Engineer

Why Work at Lenovo

Here at Lenovo, we believe in smarter technology for all, so we spend our time building a society that's brighter and more inclusive.

And we go big. No, not big‑huge.

We're not just a Fortune 500 company, we're one of Fortune's Most Admired. We're in 180 countries, working with 63,000 brilliant colleagues and counting. And we're known for the world's most complete portfolio of smart technology, from devices to software to infrastructure.

With our ingenuity, we help millions—not just the select few—experience our version of a smarter future.

The one thing that's missing? Well... you...

At Lenovo, we manufacture one of the world's widest portfolios of connected products, including PCs (Think Pad, Yoga, Lenovo Legion), tablets, smartphones and workstations as well as augmented and virtual reality (Mirage, Think Reality) and smart home/office solutions. We are also building an innovative portfolio of software and services which are changing the industry. Lenovo is creating the capacity and computing power for the connections that are changing business and society.

We are searching for a Security Development Engineer in the Security Center of Excellence for PC and Smart Devices business (PCSD). This is an exciting role where you will apply your application development skills to help build and maintain a security management portal for managing security assessments, vulnerability tracking, and other processes critical to the delivery of secure products to our customers.

You'll work with an international team of product security professionals and will have the opportunity to learn about the high‑demand field of cybersecurity. The web portal is developed using PHP, so knowledge of the language and development frameworks, such as Think

PHP, is required. Familiarity with frontend development technologies, such as HTML, CSS and JavaScript will be needed, as will knowledge of backend technologies like MySQL, Apache and Nginx.

• Lead development of the existing web portal to meet new requirements from security engineers, project managers, users, and stakeholders
• Ensure that the security portal meets the needs of the security team while they perform reviews, as well as development teams and project managers who will consume the results of the reviews.
• Oversee deployment and maintenance of the portal into an on‑premise cloud infrastructure
• Serve as a bridge between the multiple security teams across the globe, ensuring that requirements of all teams are met.
• Integrate a variety of Dev Sec Ops  tools output with the Lenovo Global Security Lab portal using the Dev Sec Ops  Tools native APIs to help automate security team processes and tasks.

• Bachelor's degree in Computer Science, Computer Engineering or related field
• 5+ years relevant experience; or master's degree
• 3+ years relevant experience; or equivalent experience 3+ years software development experience with Java, Python and PHP web applications
• 3+ years experience in secure software development and software security testing

• Experience with PHP development
• Familiarity with Think
  
  PHP or similar development framework
• Experience with frontend development, including HTML, CSS and Java Script
• Knowledge of backend technologies, including databases, MySQL, Apache and Nginx
• Strong written and verbal communication skills - this role requires communicating with stake holders, users, project managers, and security engineers, as well as communicating with diverse and global teams
• Familiarity with Atlassian APIs for Jira and Confluence for importing existing datasets
• Familiarity with a wide range of security testing tools
• Extensive knowledge of software security vulnerability mitigation & remediation techniques
• Strong understanding of general secure development practices: code review, static analysis, dynamic analysis, and tools for SAST, DAST, IAST, Threat Modeling, etc.
• Extensive knowledge of OWASP security practices and tools
• Familiarity with a variety of Dev Sec Ops  tools Testing Automation Experience
• Extensive experience with CVSS, CVE, CWSS, CWE software vulnerability and software weakness scoring
• Experienced with Agile development methodology, processes and tools
• Mandarin Fluency

We are an Equal Opportunity Employer and do not discriminate against any employee or applicant for employment because of race, color, sex, age, religion, sexual orientation, gender identity, status as a veteran, and basis of disability or any federal, state, or local protected class.