Software Engineer - job 1 of 3

Please Note:

1. If you are a first time user, please create your candidate login account before you apply for a job. (Click Sign In > Create Account)

2. If you already have a Candidate Account, please Sign-In before you apply.

Job Description:

Broadcom is a leading global company in infrastructure technology, data center networking, and security, built on decades of innovation, collaboration, and engineering excellence. The Application Networking and Security (ANS) division develops advanced security solutions—including distributed firewall and micro-segmentation technologies—that protect east-west traffic across enterprise data centers. We have an exciting opportunity for a Member of Technical Staff (Professional 4) to join our Security Intelligence Big Data and Analytics team.

Today's enterprise networks face an expanding attack surface and an ever-changing threat landscape. Our team is on a mission to meet this challenge by delivering powerful, cutting-edge capabilities for VMware vDefend Advanced Threat Prevention (ATP) and the VMware vDefend Firewall.

Hosted on the Security Services Platform (SSP), Security Intelligence is a state-of-the-art analytics platform that provides deep network security visibility within virtualized data centers. It streamlines software-defined Layer 3-7 firewall network segmentation by offering graphical visualization of workloads and traffic flows, alongside automated security policy recommendations that enable micro-segmentation at massive scale.

Our team is looking for engineers who share our passion for innovation in distributed systems, container networking, and big data. You will be working within a massive, polyglot repo using technologies like Kubernetes, Kafka, Redis, MinIO, Apache Spark, and PostgreSQL to empower Security Analysts to keep their environments safe from malicious threats.

What You'll Actually Work On

• Network Policy & Micro-segmentation — Building the analytics engines that generate dynamic policy recommendations to eliminate lateral threat movement.
• Datacenter-Wide Graphical Visualization — Delivering comprehensive, near real-time graphical visualization of Applications, Groups, VMs, IPs, and aggregated network traffic flows to provide deep visibility into complex modern applications.
• Metadata Ingestion & "Security as Code" — Building robust data pipelines to ingest Configuration Management Database (CMDB) metadata, automating the definition of hierarchies, bulk tag assignments, group creation, and policy bootstrapping—reducing segmentation planning from months to minutes.
• Continuous Segmentation Monitoring & Drift Detection — Developing tools that continuously monitor network traffic to surface new or unapproved flows, track traffic leakage (for infrastructure workloads and between environments), and alert administrators to unauthorized activity, ensuring continuous compliance.
• Runtime Threat Detection & High-Throughput Streaming — Building detection capabilities that identify anomalous behavior and policy violations using high-throughput data processing systems.
• Distributed & Stateful Workloads — Configuring and managing workloads that require consensus, replication, and fault tolerance—including analytical databases and message buses running on Kubernetes via Operators or StatefulSets.

How You'll Work

• Own components end-to-end — From breaking down ambiguous problems into clear technical design specs, test driven development through to production support.
• Develop Polyglot Systems — Writing highly performant and scalable code using Go, Java, and Python.
• Debug across layers — Diagnosing complex issues spanning the Kubernetes control plane, networking (TCP/UDP, HTTP, Antrea CNI, Envoy proxies), and cluster-level stateful workloads using Prometheus, Grafana, kubectl debug, and audit logs.
• Build automated tests — Validating security correctness and OpenAPI compliance to prevent regressions in a highly scalable micro-service environment.
• Collaborate across teams — Working closely with platform, UI, and QA engineers, while sharing knowledge and mentoring junior engineers.
• Ship in agile sprints — Participating in all phases of the software development cycle, utilizing Jira, Confluence, and Git-based workflows.

What Makes You a Strong Fit

• Kubernetes Internals — Hands-on experience with Kubernetes architecture and cluster management.
• Strong Programming Skills — Deep expertise in Go, Java (big data, stream processing, Spring/SpringBoot), and Python.
• Distributed Systems & Stateful Workloads — Experience managing consensus, replication, fault tolerance, and running databases (e.g., PostgreSQL-HA, Redis) on Kubernetes.
• High-Volume Data Systems — Experience with analytical databases (e.g., Apache Druid, ClickHouse), large-scale data ingestion (Kafka), and complex querying workloads.
• Modern Build Tooling — Experience working in large repos using advanced build systems like Bazel, alongside Docker/Helm deployments.
• Collaborative Mindset — Ability to work independently on complex problems while collaborating across a global team with a "Team First" mentality.
• Experience with VMware vDefend / DFW is a strong plus.

Education & Experience

• Bachelor's degree in Engineering/Computer Science and 8+ years of related experience, or Master's degree in Engineering/Computer Science and 6+ years of related experience.

Additional Job Description:

Compensation and Benefits

The annual base salary range for this position is $120,000 - $192,000 

This position is also eligible for a discretionary annual bonus in accordance with relevant plan documents, and equity in accordance with equity plan documents and equity award agreements.

Broadcom offers a competitive and comprehensive benefits package: Medical, dental and vision plans, 401(K) participation including company matching, Employee Stock Purchase Program (ESPP), Employee Assistance Program (EAP), company paid holidays, paid sick leave and vacation time. The company follows all applicable laws for Paid Family Leave and other leaves of absence.

Broadcom is proud to be an equal opportunity employer.  We will consider qualified applicants without regard to race, color, creed, religion, sex, sexual orientation, national origin, citizenship, disability status, medical condition, pregnancy, protected veteran status or any other characteristic protected by federal, state, or local law.  We will also consider qualified applicants with arrest and conviction records consistent with local law.

If you are located outside USA, please be sure to fill out a home address as this will be used for future correspondence.