- 5 to 8 years
of hands-on experience in C/C++ software development on Linux-based embedded or telecom platforms.
- Strong experience
in analyzing, fixing, and validating software security vulnerabilities reported by tools such as Coverity, Black Duck, Nessus, or similar static/dynamic scanners.
- Ability
to debug and fix issues in protocol stack components, including memory corruption, buffer handling, race conditions, input validation, resource leaks, and unsafe API usage.
- Good understanding
of secure coding practices, memory safety, multi-threading, IPC, Linux OS concepts, and performance-aware software design.
- Working knowledge
of 4G/5G RAN stack architecture and protocol layers such as RRC, NGAP, XnAP, PDCP, RLC, MAC, or related stack components.
- Experience
in tracing complex call flows, analyzing logs, reproducing defects, preparing patches,



and ensuring fixes do not introduce regressions.
- Ability
to handle security defects in legacy and production code while maintaining stability, scalability, and low-latency behavior of telecom software.
- Familiarity
with build systems, CI/CD pipelines, code review practices, unit testing, and defect tracking tools.
- Positive communication skills
to work with security teams, stack developers, testers, architects, and release teams for timely vulnerability closure.
- Preferred:
exposure to threat modelling, CVE analysis, SBOM/open-source vulnerability handling, hardening activities, and telecom security standards.

📌 Software Security Engineer (Bengaluru)
🏢 RARR Technologies
📍 Bengaluru