Senior DevSecOps Engineer
Core
Own the security health of desktop software products, web applications, and development pipelines by managing dependencies, running automated tests, and maintaining security scanning in CI/CD pipelines.
Role type
Senior DevSecOps Engineer
Builds
Desktop software products, web applications, and secure development pipelines for semiconductor fabrication tools
Domain
Semiconductor / Software Engineering / DevSecOps
Required skills
Python, Git, CI/CD tools (Jenkins, Azure DevOps, GitHub Actions), SCA/SAST tools (Black Duck, SonarQube), Linux/Windows environments, dependency management, Secure SDLC practices
Preferred skills
Docker, Kubernetes, cloud services (Azure, AWS, GCP), C++, build systems (gmake, scons, cmake), DAST tools (Invicti), SBOM management (SPDX, CycloneDX), open-source license compliance, JavaScript/TypeScript
Responsibilities
Remediate vulnerabilities in third-party and open-source dependencies; Run automated test suites and troubleshoot build/compatibility issues; Maintain and improve SAST, SCA, and DAST scanning integration into CI/CD pipelines; Generate and maintain Software Bills of Materials (SBOMs); Serve as primary contact between Engineering and InfoSec for risk assessments and security exceptions; Partner with Application Security Engineers on DAST and penetration testing remediation
Seniority
Senior, hands-on IC
