Senior Software Engineer II (Security)
Core
Design and develop next-generation Software Supply Chain Security capabilities, including secure-by-default frameworks, libraries, automation, and a single pane of glass application for product teams.
Role type
Senior Software Engineer II (Security)
Builds
Secure libraries, CI templates, IDE plugins, and a single pane of glass security application.
Domain
Software Supply Chain Security, DevSecOps, Cloud Native Security
Deliverable
production ML models | product features | infrastructure
Required skills
Golang (backend), JavaScript/VueJS (frontend), REST API design, CI/CD pipeline automation, AWS services (IAM, SQS, S3, Lambdas, DynamoDB, RDS, EKS, EC2), Infrastructure as Code (Terraform), SBOM generation, artifact signing, provenance verification, secrets management.
Preferred skills
GraphQL, SLSA, Sigstore/Cosign, SPDX, CycloneDX, in-toto attestations, Syft, Trivy, policy-as-code, container image trust, vulnerability management, OWASP Top 10 mitigation.
Technologies
Golang, JavaScript, VueJS, GitHub Actions, AWS, Terraform, Conjur, Vault, SLSA, Sigstore, Cosign, SPDX, CycloneDX, in-toto, Syft, Trivy
Responsibilities
Develop SecDevOps machinery providing secure defaults; build secure libraries, CI templates, and IDE plugins; develop the single pane of glass security application; lead Software Supply Chain Security initiatives (SBOM, provenance, signing, verification); design automation and policy-driven controls; write unit, integration, and security tests; provide technical security advice to management.
Seniority
Senior, hands-on IC