Engineer II, Software Assurance, Product Security
New
J
JobgetherCybersecurity
Based in United StatesFull-TimeMiddle
SalaryBase salary ranging from $100,000 to $145,000 annually
Apply NowOpens the employer's application page
Job Details
- Required Skills
- PythonGoLinuxGitHubGitLab
Requirements
- Experience working in an engineering role focused on implementing, supporting, or monitoring software security systems.
- Strong experience with GitHub, including repository administration, GitHub Actions, branch protection rules, and access management.
- Familiarity with source control platforms such as GitLab or BitBucket.
- Experience with artifact storage solutions such as Artifactory and S3.
- Knowledge of software composition analysis (SCA), dependency management, and open-source security risks.
- Experience securing Linux and/or Unix-based environments.
- Proficiency in scripting languages such as Python, Golang, Shell, or JavaScript for security automation.
- Strong understanding of software development lifecycle (SDLC), secure coding practices, code reviews, and source control security.
- Experience leveraging AI technologies to improve security workflows, automate analysis, or enhance decision-making.
- Strong communication and collaboration skills, with the ability to work effectively in a remote environment.
- Ability to independently identify security challenges and partner with teams to develop practical solutions.
Responsibilities
- Assess software supply chain risks and provide security guidance to engineering teams regarding open-source usage and repository configurations.
- Implement and maintain security controls for public and private source code repositories, including repository guardrails, access management, and secret scanning.
- Secure open-source software usage, development workflows, ingestion processes, and distribution practices across the organization.
- Investigate third-party dependencies and open-source packages to identify and mitigate risks such as dependency confusion, malicious packages, and licensing concerns.
- Develop automation and tooling to improve security checks, vulnerability identification, and operational efficiency.
- Contribute to security initiatives focused on strengthening code-hosting environments and software development workflows.
- Collaborate with cross-functional teams to promote secure coding practices and improve software security awareness.
- Support continuous improvement of security processes through analysis, documentation, and implementation of practical solutions.
View Full Description & ApplyYou'll be redirected to the employer's site
