security engineer in software supply chain security

Описания нет

• Assess the SBOM security and compliance landscape and ensure alignment with industry best practices and regulatory requirements
• Evaluate existing and emerging security tools for SBOM generation, vulnerability detection, and supply chain risk management
• Architect, integrate, and optimize security solutions in CI/CD pipelines, ensuring automation, efficiency, and minimal friction for engineering teams
• Lead training and mentoring sessions to drive adoption of security tools, foster a security-first mindset, and establish long-term best practices
• Define security requirements and strategies for supply chain risk management
• Evaluate complex security challenges and define pragmatic, high-impact solutions
• Design scalable security solutions that balance risk mitigation with engineering efficiency

• 5+ Years of experience in SecOps, DevSecOps, or Security Engineering, focused on software supply chain security and secure development practices
• Deep understanding of SBOM frameworks such as SPDX and CycloneDX and their role in securing software dependencies and mitigating supply chain risks
• Hands-on experience with SCA, SAST, and container security tools
• Expertise in CI/CD security automation
• Ability to design and implement scalable security solutions that balance risk mitigation with engineering efficiency
• Strong problem-solving skills and ability to evaluate complex security challenges and define pragmatic, high-impact solutions

• Условий в вакансии нет