Product Security & Compliance Engineer (DevSecOps)

The team

Our team Product Security and compliance Group stands for development, security, compliance and operations. It's an approach to culture, automation, and platform design that integrates security as a shared responsibility throughout the entire IT lifecycle. We collaborate with Security and compliance stake holders in defining policies and procedures and the evangelize them across the organization.

The role

What You Will Be Doing

• Implement and evangelize best practices and processes for the use of third party and open source libraries
• Execute and implement controls for the tracking, and license approval, of Open Source and Commercial libraries
• Execute third party software forensics analysis using Black duck (or similar software composition analysis platform) as the primary tool
• Maintain strong customer focus while producing results
• Provide input for process improvements that increase the efficiency and effectiveness of the R&D teams in terms of delivery
• Verify software license rules, copyrights, and entitlements
• Perform audit and software license due diligence as required
• Engage legal resources as required
• Maintain software license & proof of entitlement records
• Support to the global team.

What you'll bring

• Bachelor's degree in Managing Information Systems, Computer Science or equivalent experience
• Required experience 2-6 yrs of experience
• Excellent verbal and written communication skills with the ability to interact effectively with employees at varying levels of the organization
• Strong analytical skills and problem-solving abilities
• Experience with Open source Licenses.
• Exposure to tools like Blackduck/White Source/X-Ray
• In performing the essential job functions, the employee will be required to have familiarity with the following computer technologies:
• Knowledge of Microsoft windows operating environments
• Knowledge of Linux operating system environment
• Knowledge of industry products, terminology and trends
• Knowledge of fundamental IT concepts, practices and procedures
• Knowledge of Programming concepts experience with any programming language / technology.
• Knowledge of shell script / Python / Groovy programming
• Strong organization skills
• Attention to detail
• Ability to prioritize and multi-tasking