Hacker News new | ask | show | jobs
by dev_0 1406 days ago
Are there engineering problems in security
1 comments

You'll encounter two kinds in most Security Engineer roles:

1) reviewing and advising on engineering work carried by other engineers, so you need to understand what they're doing, why they're doing it that way, and what the more secure alternatives could be, all while taking into account any limitations (time, budget, developer experience). This may include pairing sessions with Software or Platform Engineers when it comes to implementing security-critical bits.

2) building, deploying and maintaining your own solutions to security problems your company is facing. This could be security automation, threat detection engineering, secure-by-default infrastructure-as-code modules etc.

In general you need to be a high-breadth, medium-depth well-rounded engineer to pull your weight as a Security Engineer in a decent tech company.