Senior Security Software Engineer

Job description

ISRM is looking for a Senior Security Software Engineer to join our ISRM Software & Data Engineering team to develop innovative software solutions supporting our Software Supply Chain Security program.

Senior Security Software Engineer are experienced professionals that design, develop, test, deploy, maintain, and enhance security software solutions. They have in-depth knowledge and subject matter expertise in secure software development.

The Senior Security Software Engineer interacts with internal and external teams to train them on the products, works on projects independently and collaborates with cross-functional teams to manage project priorities, deadlines, and deliverables.

In this role, you will mentor and guide others by reviewing the code of more junior software engineers as well as encourage others to grow their technical skillset.

Senior Security Software Engineer are creative problem solvers and are involved in continuously driving improvements across the software development life cycle as well as ensuring best practices are utilized.

About The Role

In this role as Senior Software Engineer, you will:

• Support ISRM Software Supply Chain Security program.
• Delivers end-to-end technical solutions for multiple products or complex projects
• Solves complex problems with minimal guidance
• Design, develop and test software systems and/or applications for enhancements and new products
• Writes code according to coding specifications established for software solutions.
• Delivers software features with exceptional quality, meeting designated release plans and delivery commitments.
• Develops software solutions by studying information needs, conferring with users, studying systems flow, data usage, and work processes; investigating problem areas; and following the software development lifecycle.
• Documents and demonstrates solutions by developing documentation, flowcharts, layouts, diagrams, charts, code comments, and clear code.
• Improves operations by conducting systems analysis and recommending changes in policies and procedures.
• Breaks down customer requirements/problems into for the team.
• Ability to clearly communicate technical concepts to stakeholders

About You

You are a fit for this position if your background includes:

Must Have

• 7+ years of experience in software development.
• Hands-on with Golang, JavaScript/ TypeScript and Python.
• Experience with automation and scripting with either Bash, PowerShell.
• Strong understanding of CI/CD concepts and pipelines.
• Understanding of software supply chain security concepts.
• Solid Experience with GitHub, GitHub Workflows and Actions.
• Knowledge of cryptography concepts (digital signatures, symmetric and asymmetric encryption, hashing, ...)
• Working proficiency leveraging and operating the AWS services such as (but not limited to) IAM, SQS, S3, Lambda, CloudFormation, CloudFront, DynamoDB, ECS, and EC2.
• Understanding of containers technologies (Docker).
• Good written and verbal communication skills.

Nice to Have

• Bachelor's degree in systems Engineering or similar.
• Familiarity of main software supply chain security frameworks (SLSA, in-toto).
• Solid understanding of SBOM management processes, formats, and toolchains.
• Knowledge of cryptography implementations (e.g.,Sigstore)
• SQL, Vue.js (or proficient with reactive JavaScript frameworks) and HTML
• AWS CodeBuild, CodePipeline, RDS
• Experience with Infrastructure as Code (IaC) such as Terraform.
• Experience with REST APIs and microservices.
• Hands-on security engineering or application security experience a plus.
• Knowledge of SCRUM Agile methodology.