Applied R&D Engineer

The Applied R&D Engineer conducts target-oriented research to directly apply findings to the specification, design, further development, and incremental improvement of products, services, systems, tools, processes, etc. Integrates, verifies, tests, and modifies SW / HW / system components and capitalises on innovative solutions to meet particular requirements and specifications.
As a part of CNS CSF team, you will be working on delivering open-source components on to various PaaS environments like NCS, AWS, Azure, GCP etc, contributing to the open-source community and ensuring security of the open-source components on PaaS.

Must Have:

• Graduate/Post graduate in Engineering or equivalent degree with 4 7 years of strong hands-on experience with along with expertise in Java, Python, and J2EE.
• Proven ability to build, test, and ship software at scale, with experience in the full development lifecycle including design, coding, reviews, unit testing, and bug fixing.
• Experience in handling security vulnerabilities (CVE), performing scans (Burp, Anchore, Malware, Codenomicon), analyzing results, and driving remediation in collaboration with development teams.

Good to Have:

• Familiarity with security protocols (TLS, SSH), encryption methodologies, and secure-by-design practices including threat analysis and system hardening and open-source technologies such as KeyCloak and OpenBao,
• Exposure to advanced security testing methods such as penetration testing, robustness tests, DoS tests, and vulnerability scanning for both containerized and non-containerized environments.
• Practical knowledge of microservices, containers (Docker, Kubernetes, Helm, Operators), and CI/CD/DevOps practices.

• Contribute to delivering and securing open-source components like KeyCloak, OpenBao, and Ingress Controller across PaaS environments (NCS, AWS, Azure, GCP), while actively engaging with the open-source community.
• Drive end-to-end security response processes by analyzing and prioritizing CVEs, collaborating with development teams, and delivering effective remediations.
• Perform vulnerability assessments using tools such as Burp, Anchore, Malware scans, and Codenomicon, mapping severity levels to ensure secure open-source software usage.
• Design, build, test, and ship software at scale using Java, Python, and J2EE technologies, while participating in all stages of development including coding, reviews, unit testing, and bug fixing.
• Lead by example in fostering a culture of craftsmanship, innovation, and continuous improvement, while shaping and optimizing development practices
• Work in agile, collaborative environments with cross-functional teams, contributing to both technical excellence and secure, scalable software delivery