Job Skills:
- 2+ years of experience in software development
- Experience with Build tools (i.e., Make files, Maven/Gradle, Bazel, ANT)
- Experience with package management tools (i.e., Maven, PIP, NPM, etc.)
- Proficient understanding of open-source security principles.
- Familiarity with Common Vulnerabilities and Exposures (CVE) and vulnerability management processes.
- Experience with vulnerability assessment tools and methodologies.
- Proficiency in multiple programming languages, such as Golang, Python, Java, C++, or JavaScript, is a must.
- Ability to distill and explain complex technical and security concepts to varied audiences.
- Experience with GIT (understanding of GitHub PR flow & Gerrit Patch set flow is a plus)
- Experience with building / managing CI/CD pipelines using Jenkins, ircleCI, or other CI/CD systems
- Experience collaborating with cross-functional security and engineering teams.
- Experience with developing, building, and shipping secure code is a plus.
- Experience with microservices architecture, as well as Docker and Kubernetes.
- Ability to work independently while effectively engaging with global teams.
- Experience in prioritizing and executing tasks with minimal direction or Oversight.
Role:
Provide recommendations and support for addressing identified open-source security vulnerabilities, ensuring timely resolutions.
This role involves implementing code changes to address open-source security vulnerabilities.
Conduct thorough reviews on internally developed applications, focusingon security vulnerabilities and coding best practices.
Review and assess third-party and open-source libraries for security risks, providing guidance on their safe integration into our applications.
Collaborate with Product, Engineering, and broader Security teamsto provide recommendations aimed at reducing security risks.
Document security vulnerabilities, remediation plans, and progress, ensuring all stakeholders are kept informed.
Note:
Main Skillset: Python Development
Value Add Skills:C++, Java Script, Golang,Java
Notice PeriodImmediate to 45 days.
