Experienced Security Tools Engineer – Static Code Analysis, Lund
Core
Build and maintain static code analysis tooling (primarily Coverity) to help developers find and fix vulnerabilities in AXIS OS before shipping.
Role type
Senior IC security tools engineer (static analysis)
Builds
Static code analysis capabilities and security tooling ecosystem for embedded Linux distribution
Domain
Embedded systems / Application security / DevSecOps
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
Static code analysis tools (Coverity, SonarQube), C/C++ development, secure coding practices (CERT C/C++, MISRA C), CI/CD pipelines, vulnerability management, supply chain security, embedded development, Git/Gerrit
Preferred skills
EU Cyber Resilience Act (CRA) compliance, ISO 27001, open-source community contribution
Technologies
Coverity, SonarQube, Gerrit, Git, AXIS OS
Responsibilities
Configure and refine Coverity static analysis capabilities, support developers in using static analysis to resolve vulnerabilities, collaborate with product management on compliance needs, evaluate and introduce new static analysis features, cooperate on broader security tooling initiatives
Seniority
Senior, hands-on IC
