Senior Security Software Engineer

Senior Security Software Engineer are experienced professionals that design, develop, test, deploy,maintain, and enhance security software solutions. They have in-depth knowledge and subject matterexpertisein secure software development.The Senior Security Software Engineer interacts with internal and external teams to train them on the products, works on projects independently and collaborates with cross-functional teams to manage project priorities, deadlines, and deliverables.In this role, you will mentor and guide others by reviewing the code of more junior software engineers as well as encourage others to grow their technical skillset.Senior Security Software Engineer are creative problem solvers and are involved in continuously driving improvements across the software development life cycle as well as ensuring best practices are utilized.

About The Role

In this role as Senior Software Engineer, you will:

• Support ISRM

  Software Supply Chain Security

  program.
• Delivers end-to-end technical solutions for multiple products or complex projects
• Solves complex problems with minimal guidance
• Design, develop and test software systems and/or applications for enhancements and new products
• Writes code according to coding specificationsestablishedfor software solutions.
• Delivers software features with exceptional quality, meeting designated release plans and delivery commitments.
• Develops software solutions by studying information needs, conferring with users, studying systems flow, data usage, and work processes; investigating problem areas; and following the software development lifecycle.
• Documents anddemonstratessolutions by developing documentation, flowcharts, layouts, diagrams, charts, code comments, and clear code.
• Improves operations by conducting systems analysis and recommending changes in policies and procedures.
• Breaks down customer requirements/problems into for the team.
• Ability to clearly communicate technical concepts to stakeholders

About You

You are a fit for this position if your background includes:

Must Have

• 5+ years of experience in software development.
• Hands-on with Golang, JavaScript/TypeScriptandPython.
• Experience with aautomation and scriptingwitheitherBash, PowerShell.
• Strong understanding of CI/CDconcepts and pipelines.
• Understanding of software supply chain security concepts.
• SolidExperience withGitHub, GitHub Workflows and Actions.
• Knowledge of cryptography concepts (digital signatures, symmetric and asymmetric encryption, hashing, ...)
• Working proficiency leveraging and operating the AWS services such as (but not limited to) IAM, SQS, S3,Lambda, CloudFormation, CloudFront, DynamoDB, ECS, and EC2.
• Understanding ofcontainerstechnologies(Docker).
• Good written and verbal communication skills.

Nice to Have

• Bachelors degree in systems Engineering or similar.
• Familiarity of main software supply chain security frameworks (SLSA, in-toto).
• Solid understanding of SBOM management processes, formats, and toolchains.
• Knowledge of cryptographyimplementations (e.g.,Sigstore)
• SQL,Vue.js (or proficient with reactive JavaScript frameworks) and HTML
• AWSCodeBuild,CodePipeline,RDS
• Experience with Infrastructure as Code (IaC) such as Terraform.
• Experience with REST APIs and microservices.
• Hands-on security engineering or application security experience a plus.
• Knowledge of SCRUM Agilemethodology.