Description
We are seeking a DevSecOps SCA Engineer to join our team in San Juan, Puerto Rico.
As a DevSecOps SCA Engineer, you will play a critical role in designing, developing, and maintaining software solutions, including enhancements, updates, and programming changes for system software, utilities, and security tools.
Responsibilities:
- Lead the design, development, and maintenance of software solutions
- Develop and operate automated pipelines for SBOM generation during build and release processes
- Integrate SCA, dependency tracking, artifact signing, and supply chain security controls into CI/CD pipelines
- Define and enforce policies for SBOM quality, format compliance, and attestations
- Collaborate with engineering, security, and compliance teams on vulnerability triage, exception handling, and audit readiness
- Analyze system designs and determine coding, integration, and testing activities
- Write and execute comprehensive test plans, protocols, and documentation
- Lead cross-functional project teams to deliver reliable, cost-effective, and high-quality solutions
- Develop dashboards and reports to monitor supply chain posture, SLA adherence, and provide executive insights
Education and Experience Required:
- Bachelor’s or Master’s degree in Computer Science, Information Systems, or equivalent
- Typically 5-8 years of experience in software development, security engineering, DevSecOps, or platform engineering roles with a focus on security and supply chain integrity
Knowledge and Skills:
- Hands-on experience with SBOM standards such as SPDX and CycloneDX
- Strong understanding of software supply chain security concepts
- Proficiency with supply chain security tooling such as Trivy, BlackDuck, or similar SCA tools
- Familiarity with cloud-native architectures and CI/CD ecosystems
- Scripting and automation skills in languages like Python, Go, Bash, or PowerShell
- Excellent communication skills
What We Can Offer You:
- Comprehensive suite of benefits that supports physical, financial, and emotional wellbeing
- Investment in your career through personal and professional development programs
- Unconditional inclusion and celebration of individual uniqueness