Description

Build and enhance Software Composition Analysis (SCA) practices and secure the software supply chain.

This role is hybrid.

Responsibilities

• Manage security automation tools including Checkmarx One and BlackDuck, handling regular upgrades.
• Collaborate with DevOps and security architecture teams to design vulnerability management workflows.
• Design advanced security solutions for open-source supply chains, including SBOM creation and code signing.
• Analyze and support container security tools and platforms.
• Partner with governance and compliance teams to support SOC 2 and PCI-DSS audits.

Required Skills

• 5+ years of Information Security Engineering experience.
• 5+ years as an Application Security and DevSecOps engineer.
• Hands-on experience with Checkmarx or BlackDuck.
• 3+ years in programming languages such as .NET, C#, Java, Rust, or C++.
• Experience with CI/CD pipelines and related technologies.
• Knowledge of OWASP Top 10 or CWE.
• Experience generating SBOMs using CycloneDX or SPDX.
• Experience with container security, Kubernetes, or OpenShift.

Preferred Skills

• Automation scripting in Python or PowerShell.
• Familiarity with AI tools for false positive reduction and auto code remediation.
• Information security certifications such as CISSP, CISM, or CEH.

Key Skills

Education

Any Graduate