DevSecOps SCA Engineer
Core
Design, develop, and maintain software solutions with a focus on supply chain security, SBOM generation, and integrating security controls into CI/CD pipelines.
Role type
Senior IC DevSecOps SCA Engineer
Builds
Automated pipelines for SBOM generation, security tooling integrations, and dashboards for supply chain posture monitoring.
Domain
Cybersecurity / Software Supply Chain / DevSecOps
Deliverable
production ML models | product features | infrastructure
Required skills
SBOM standards (SPDX, CycloneDX), SCA tooling (Trivy, BlackDuck), CI/CD integration, artifact signing, vulnerability triage, Python/Go/Bash scripting, cloud-native architectures
Preferred skills
SLSA, provenance concepts, Grafana/Datadog, mentoring, cross-functional leadership
Technologies
SPDX, CycloneDX, Trivy, BlackDuck, Grafana, Datadog, Python, Go, Bash, PowerShell
Responsibilities
Lead design and development of security tools and software solutions; Develop and operate automated pipelines for SBOM generation; Integrate SCA and dependency tracking into CI/CD pipelines; Define and enforce SBOM quality policies; Collaborate on vulnerability triage and audit readiness; Develop dashboards to monitor supply chain posture; Mentor less experienced staff.
Seniority
Senior, hands-on IC with project lead capabilities
