# Senior Software Engineer II

**Company**: Thomson Reuters
**Work arrangement**: hybrid
**Experience**: senior
**Job type**: full-time
**Category**: Engineering
**Industry**: Technology

**Apply**: https://thomsonreuters.wd5.myworkdayjobs.com/en-US/External_Career_Site/job/India-Bengaluru-Karnataka/Senior-Software-Engineer-II--Security-_JREQ202434?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_bc24ddd5-21f

## Description

As a Senior Software Engineer II, you will focus on designing and developing the next generation of Software Supply Chain Security capabilities.

This role will help establish secure-by-default frameworks, libraries, and automation that improve how product teams generate SBOMs, capture software supply chain provenance, sign and verify artifacts, and adopt trusted build and release patterns across their S-SDLCs.

**Responsibilities:**

- Develop SecDevOps machinery that provides teams with secure defaults that powers frictionless product security vision

- Work on sets of secure libraries, CI templates, IDE plugins to further adoption of security

- Develop a single pane of glass application, providing insights and self-service to product teams

- Lead and contribute to Software Supply Chain Security initiatives, including SBOM generation and consumption, build provenance, artifact signing, signature verification, and trusted release workflows

- Design automation and policy-driven controls that help teams prove what was built, where it came from, and whether it can be trusted before deployment

- Work with application security and cloud native security teams to develop supply chain security toolchain

- Partner with various teams to mature SSCS/SSCP practices aligned to industry approaches

- Write unit, integration, regression, security tests to consistently deliver quality and security

- Provide expert technical security advice to management

- Participate in developing software development guidelines and documentation

**Requirements:**

- 6+ years as a software developer in Golang (backend) and JavaScript (frontend – mainly VueJS)

- Expert in developing robust, scalable and well-documented REST APIs

- Working proficiency in building (secure) CI/CD pipelines with GitHub Actions

- Well-versed in automation workflows and scalability

- Working proficiency leveraging and operating AWS services such as IAM, SQS, S3, Lambdas, DynamoDB, RDS, EKS, and EC2

- Working proficiency building infrastructure as code with Terraform

- Familiarity with software supply chain security concepts

- In-depth understanding of software development methodologies

- Understanding and experience in dealing with secrets management and other Privileged Access Management workflows a plus

- Experience with software supply chain security tooling and standards

- Background in security engineering, application security, DevSecOps, platform security, or product security automation strongly preferred

**Benefits:**

- Hybrid Work Model

- Flexibility & Work-Life Balance

- Career Development and Growth

- Industry Competitive Benefits

- Culture

- Social Impact

- Making a Real-World Impact

## Skills

### Required
- Golang
- JavaScript
- VueJS
- REST APIs
- GitHub Actions
- AWS
- Terraform
- Software Supply Chain Security

### Nice to have
- GraphQL
- Conjur/Vault
- Secrets Management
- SLSA
- Sigstore/Cosign
- in-toto
- SPDX
- CycloneDX

---

Source: [Apply at thomsonreuters.wd5.myworkdayjobs.com](https://thomsonreuters.wd5.myworkdayjobs.com/en-US/External_Career_Site/job/India-Bengaluru-Karnataka/Senior-Software-Engineer-II--Security-_JREQ202434?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)