# DevSecOps SCA Engineer

**Company**: Hewlett Packard Enterprise
**Location**: San Juan, Puerto Rico
**Work arrangement**: hybrid
**Experience**: senior
**Job type**: full-time
**Category**: Engineering
**Industry**: Technology

**Apply**: https://hpe.wd5.myworkdayjobs.com/en-US/Jobsathpe/job/San-Juan-Puerto-Rico-Puerto-Rico/DevSecOps-SCA-Engineer_1212260-2?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_4e1cd276-848

## Description

We are seeking a DevSecOps SCA Engineer to join our team in San Juan, Puerto Rico.

As a DevSecOps SCA Engineer, you will play a critical role in designing, developing, and maintaining software solutions, including enhancements, updates, and programming changes for system software, utilities, and security tools.

Responsibilities:

- Lead the design, development, and maintenance of software solutions

- Develop and operate automated pipelines for SBOM generation during build and release processes

- Integrate SCA, dependency tracking, artifact signing, and supply chain security controls into CI/CD pipelines

- Define and enforce policies for SBOM quality, format compliance, and attestations

- Collaborate with engineering, security, and compliance teams on vulnerability triage, exception handling, and audit readiness

- Analyze system designs and determine coding, integration, and testing activities

- Write and execute comprehensive test plans, protocols, and documentation

- Lead cross-functional project teams to deliver reliable, cost-effective, and high-quality solutions

- Develop dashboards and reports to monitor supply chain posture, SLA adherence, and provide executive insights

Education and Experience Required:

- Bachelor’s or Master’s degree in Computer Science, Information Systems, or equivalent

- Typically 5-8 years of experience in software development, security engineering, DevSecOps, or platform engineering roles with a focus on security and supply chain integrity

Knowledge and Skills:

- Hands-on experience with SBOM standards such as SPDX and CycloneDX

- Strong understanding of software supply chain security concepts

- Proficiency with supply chain security tooling such as Trivy, BlackDuck, or similar SCA tools

- Familiarity with cloud-native architectures and CI/CD ecosystems

- Scripting and automation skills in languages like Python, Go, Bash, or PowerShell

- Excellent communication skills

What We Can Offer You:

- Comprehensive suite of benefits that supports physical, financial, and emotional wellbeing

- Investment in your career through personal and professional development programs

- Unconditional inclusion and celebration of individual uniqueness

## Skills

### Required
- SBOM
- SCA
- CI/CD
- Python
- Go
- Bash
- PowerShell
- SPDX
- CycloneDX
- Trivy
- BlackDuck
- Grafana
- Datadog

---

Source: [Apply at hpe.wd5.myworkdayjobs.com](https://hpe.wd5.myworkdayjobs.com/en-US/Jobsathpe/job/San-Juan-Puerto-Rico-Puerto-Rico/DevSecOps-SCA-Engineer_1212260-2?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)