Tasks
•Assess the SBOM security and compliance landscape and ensure alignment with industry best practices and regulatory requirements
•Evaluate existing and emerging security tools for SBOM generation, vulnerability detection, and supply chain risk management
•Architect, integrate, and optimize security solutions in CI/CD pipelines, ensuring automation, efficiency, and minimal friction for engineering teams
•Lead training and mentoring sessions to drive adoption of security tools, foster a security-first mindset, and establish long-term best practices
•Define security requirements and strategies for supply chain risk management
•Evaluate complex security challenges and define pragmatic, high-impact solutions
•Design scalable security solutions that balance risk mitigation with engineering efficiency
Requirements
•5+ Years of experience in SecOps, DevSecOps, or Security Engineering, focused on software supply chain security and secure development practices
•Deep understanding of SBOM frameworks such as SPDX and CycloneDX and their role in securing software dependencies and mitigating supply chain risks
•Hands-on experience with SCA, SAST, and container security tools
•Expertise in CI/CD security automation
•Ability to design and implement scalable security solutions that balance risk mitigation with engineering efficiency
•Strong problem-solving skills and ability to evaluate complex security challenges and define pragmatic, high-impact solutions
Conditions
No conditions stated in the posting.
