Description

You will join the application security engineering team to build and enhance Software Composition Analysis (SCA) practices and secure the software supply chain.

Responsibilities

• Manage security automation tools with a focus on SCA, including Checkmarx One and BlackDuck, and handle regular tool upgrades.
• Collaborate with DevOps, vulnerability operations, and security architecture teams to design vulnerability management workflows and optimize developer experiences.
• Design and build advanced security solutions to strengthen open-source software supply chains, including SBOM creation and code signing.
• Analyze, architect, and support container security tools and platforms.
• Partner with governance, risk, and compliance teams to support audits such as SOC 2 and PCI-DSS.

Required Skills

• 5+ years of Information Security Engineering experience.
• 5+ years of experience as an Application Security and DevSecOps engineer.
• Hands-on experience with Checkmarx or BlackDuck.
• 3+ years of experience in one or more programming languages: .NET, C#, Java, Rust, or C++.
• Experience with CI/CD pipelines and related technologies.
• Knowledge of OWASP Top 10 or CWE.
• Ability to create detailed documentation for SCA procedures and tool configurations.
• Experience generating Software Bill of Materials (SBOMs) using CycloneDX or SPDX.
• Experience with container security, Kubernetes, or OpenShift.

Preferred Skills

• Automation scripting in Python or PowerShell.
• Familiarity with AI tools for false positive reduction and auto code remediation.
• Experience using Jira and Confluence.
• Information security certifications such as CISSP, CISM, or CEH.

Key Skills

Education

Any Graduate