Product Security Engineer

Company Overview

With 80,000 customers across 150 countries, UKG is the largest U.S.-based private software company in the world. And we’re only getting started. Ready to bring your bold ideas and collaborative mindset to an organization that still has so much more to build and achieve? Read on.

At UKG, you get more than just a job. You get to work with purpose. Our team of U Krewers are on a mission to inspire every organization to become a great place to work through our award-winning HR technology built for all.

Here, we know that you’re more than your work. That’s why our benefits help you thrive personally and professionally, from wellness programs and tuition reimbursement to U Choose — a customizable expense reimbursement program that can be used for more than 200+ needs that best suit you and your family, from student loan repayment, to childcare, to pet insurance. Our inclusive culture, active and engaged employee resource groups, and caring leaders value every voice and support you in doing the best work of your career. If you’re passionate about our purpose — people —then we can’t wait to support whatever gives you purpose. We’re united by purpose, inspired by you.

Job Summary

UKG is seeking a talented Product Security Engineer to join our internal Global Security Research & Architecture team chartered to identify application security vulnerabilities within the UKG product lines. The goal of this team is to develop and implement automation solutions to support Secure Software Development Lifecycle practices.

This is a rare opportunity for the right Product Security Engineer to join UKG’s award winning team. You will be working alongside some of the best in the business. If you are qualified and want to join our top-rated team, apply online today.

Key Responsibilities:

• Ensure that all tools supporting the security of the Software Development Lifecycle (SDLC) are performing optimally (e.g., SAST, SCA, DAST, MAST, etc.)
• Develop and maintain automated solutions/scripts to support the security of the SDLC.
• Stay up to date with the latest security threats, vulnerabilities, and DevSecOps industry trends.
• Collaborate with development teams to ensure that security is built into every stage of the software development lifecycle.
• Create and maintain documentation for security processes, procedures, and guidelines.
• Work with cross-functional teams to provide education and guidance about internally developed and external tools supporting the Secure Software Development Lifecycle
• Participate in security audits and assessments.
• Continuously improve Secure Software Development Life Cycle (S-SDLC) processes and environments
• Provide expertise in Continuous Integration and Deployment platforms.

Required Qualifications:

• Must have a bachelor's degree in computer science, software engineering, or related fields.
• 1+ years of Python development experience, Golang is desirable but not required.
• Fluent in scripting languages (Bash, JavaScript, etc...)
• Basic knowledge of Docker and Kubernetes
• Familiarity with CI/CD tools and processes.
• Familiarity with OWASP Top 10 and Vulnerability Management
• Basic knowledge of Software Composition Analysis (SCA) tools
• Basic knowledge of Static Application Security Testing (SAST) tools
• Familiarity with cloud platforms and infrastructure – Google Cloud Platform preferred.
• Experience with code repository management platforms - GitHub, BitBucket, GitLab
• Must be a team player with great interpersonal skills.

Where we’re going

UKG is on the cusp of something truly special. Worldwide, we already hold the #1 market share position for workforce management and the #2 position for human capital management. Tens of millions of frontline workers start and end their days with our software, with billions of shifts managed annually through UKG solutions today. Yet it’s our AI-powered product portfolio designed to support customers of all sizes, industries, and geographies that will propel us into an even brighter tomorrow!

UKG is proud to be an equal opportunity employer and is committed to promoting diversity and inclusion in the workplace, including the recruitment process.

Disability Accommodation

For individuals with disabilities that need additional assistance at any point in the application and interview process, please email UKGCareers@ukg.com