Job
Description
Role: Provide recommendations and support for addressing identified open- source security vulnerabilities, ensuring timely resolutions. This role involves implementing code changes to address open- source security vulnerabilities. Conduct thorough reviews on internally developed applications, focusing on security vulnerabilities and coding best practices. Review and assess third-party and open-source libraries for security risks, providing guidance on their safe integration into our applications. Collaborate with Product, Engineering, and broader Security teams to provide recommendations aimed at reducing security risks. Document security vulnerabilities, remediation plans, and progress, ensuring all stakeholders are kept informed. Value Add Skills: C++, Java Script, Golang Responsibilities: 2+ years of experience in software development Experience with Build tools (i.e., Make files, Maven/Gradle, Bazel, ANT) Experience with package management tools (i.e., Maven, PIP, NPM, etc.) Proficient understanding of open-source security principles. Familiarity with Common Vulnerabilities and Exposures (CVE) and vulnerability management processes. Experience with vulnerability assessment tools and methodologies. Proficiency in multiple programming languages, such as Golang, Python, Java, C++, or JavaScript, is a must Ability to distill and explain complex technical and security concepts to varied audiences. Experience with GIT (understanding of GitHub PR flow & Gerrit Patch set flow is a plus) Experience with building / managing CI/CD pipelines using Jenkins, CircleCI, or other CI/CD systems Experience collaborating with cross-functional security and engineering teams. Experience with developing, building, and shipping secure code is a plus. Experience with microservices architecture, as well as Docker and Kubernetes. Ability to work independently while effectively engaging with global teams. Experience in prioritizing and executing tasks with minimal direction or Oversight.
