Job Title: Security & Compliance Engineer

Job Summary:

The Security & Compliance Engineer will be responsible for overseeing the complete security and compliance workstream within our organization. This includes threat modeling, FIPS 140-2 integration, NIST SP 800-193 firmware integrity, and the preparation of all security review packages. The role requires a specialist with a deep understanding of security protocols and compliance requirements, ensuring that all systems are secure and compliant with industry standards.

Responsibilities:
- Conduct threat modeling and attack surface analysis for BMC firmware, including Redfish, IPMI, KVM, boot chain, and signing processes.
- Ensure FIPS 140-2 compliance through the integration of FIPS-validated OpenSSL in Yocto, including the selection of cryptographic modules and TLS configuration for management interfaces.
- Implement NIST SP 800-193 firmware integrity measures, focusing on detection, protection, and recovery mechanisms.
- Prepare security review packages for SSRB, LSRB, and BFSRB, including code review artifacts,



architecture documentation, CVE posture reports detailing vulnerabilities and their mitigations, and managing remediation responses.
- Generate Software Bill of Materials (SBOM) and conduct license audits for all Yocto/OpenBMC dependencies, preparing OSC submissions as required.
- Provide security review and sign-off on CI/CD signing pipelines and management interface hardening, ensuring robust security measures are in place.

Mandatory Skills:
- Proficient in firmware security architecture, including threat modeling and mitigation design.
- Security
- Solid understanding of FIPS 140-2 compliance and experience with cryptographic library integration.
- Knowledge of NIST SP 800-193 and its application in firmware integrity.
- Experience in preparing security review documentation, including CVE posture reports and remediation response management.
- Familiarity with open source license compliance, includ

📌 Security & Compliance Engineer (Bengaluru)
🏢 Mphasis
📍 Bengaluru