Description
We are hiring a Member of Technical Staff to build and operate the automation that keeps third-party and open-source dependencies across a large service fleet patched, auditable, and shipped on time.
Responsibilities:
Pipeline Development & Operations
- Contribute to data pipelines that ingest vulnerability data, dependency manifests, SBOM artifacts, and deployment metadata into a queryable analytics store.
- Build and maintain batch and streaming jobs with idempotent steps, retries, and clear failure modes.
- Operate what you ship: on-call for the pipelines you own, debug production failures, and reduce toil through automation.
Repository-wide Automation
- Build scripts and small services that interact with many repositories at once , opening PRs, parsing diffs, reading CI feedback, and reconciling the results back into a central store.
- Author and maintain CI/CD pipelines with automated test coverage so remediation PRs can be reviewed and merged with confidence.
- Resolve attribution issues at the source rather than patching symptoms downstream.
Collaboration & Communication
- Partner with service owners to land dependency upgrades, triage breakage, and raise the quality of generated fix PRs.
- Translate noisy scanner output into prioritized, actionable work for engineering teams.
- Write clear design docs, runbooks, and PR descriptions; keep documentation current when behavior changes.
Quality & Growth
- Write Python and Java code that matches the conventions of the existing codebase and holds up under review.
- Add regression tests for every bug you fix; treat failing tests as signal rather than noise.
- Learn the supply chain domain on the job , vulnerability lifecycle, dependency resolution, artifact provenance , and bring that knowledge back into the pipelines you build.
The typical base salary range for this position is $117,200 - $176,700 annually. In select cities within the San Francisco and New York City metropolitan area, the base salary range for this role is $141,200 - $194,200 annually.