Description
As a Senior Software Engineer II, you will focus on designing and developing the next generation of Software Supply Chain Security capabilities.
This role will help establish secure-by-default frameworks, libraries, and automation that improve how product teams generate SBOMs, capture software supply chain provenance, sign and verify artifacts, and adopt trusted build and release patterns across their S-SDLCs.
Responsibilities:
- Develop SecDevOps machinery that provides teams with secure defaults that powers frictionless product security vision
- Work on sets of secure libraries, CI templates, IDE plugins to further adoption of security
- Develop a single pane of glass application, providing insights and self-service to product teams
- Lead and contribute to Software Supply Chain Security initiatives, including SBOM generation and consumption, build provenance, artifact signing, signature verification, and trusted release workflows
- Design automation and policy-driven controls that help teams prove what was built, where it came from, and whether it can be trusted before deployment
- Work with application security and cloud native security teams to develop supply chain security toolchain
- Partner with various teams to mature SSCS/SSCP practices aligned to industry approaches
- Write unit, integration, regression, security tests to consistently deliver quality and security
- Provide expert technical security advice to management
- Participate in developing software development guidelines and documentation
Requirements:
- 6+ years as a software developer in Golang (backend) and JavaScript (frontend – mainly VueJS)
- Expert in developing robust, scalable and well-documented REST APIs
- Working proficiency in building (secure) CI/CD pipelines with GitHub Actions
- Well-versed in automation workflows and scalability
- Working proficiency leveraging and operating AWS services such as IAM, SQS, S3, Lambdas, DynamoDB, RDS, EKS, and EC2
- Working proficiency building infrastructure as code with Terraform
- Familiarity with software supply chain security concepts
- In-depth understanding of software development methodologies
- Understanding and experience in dealing with secrets management and other Privileged Access Management workflows a plus
- Experience with software supply chain security tooling and standards
- Background in security engineering, application security, DevSecOps, platform security, or product security automation strongly preferred
Benefits:
- Hybrid Work Model
- Flexibility & Work-Life Balance
- Career Development and Growth
- Industry Competitive Benefits
- Culture
- Social Impact
- Making a Real-World Impact