Sr. Engineer, Software Assurance - Product Security (Remote)

About this role

About the Opportunity:

A global leader in cybersecurity protects people, processes, and technologies that drive modern organizations. The mission is to stop breaches by redefining modern security with an advanced AI-native platform. The role focuses on protecting the organization and its customers from advanced threats by assessing, designing, and implementing security controls and systems related to the software supply chain. The Product Security team targets active threats to products, performing technical security assessments, monitoring vulnerabilities and system behaviors, creating tooling for gaps, and deploying large-scale security and monitoring systems. The role also involves managing cross-functional projects to strengthen internal systems and processes.

Responsibilities:

• Assess risk and provide security guidance on systems and software implementations

• Design and implement tools and processes to secure and monitor software build pipelines, including signing

• Harden open source code usage, development, and distribution

• Investigate systems and applications to improve security posture

• Advocate best-security practices across the engineering organization

• Manage end-to-end delivery of large-scale security initiatives to harden software supply chain systems and processes

Requirements:

• Experience in engineering roles designing, implementing, and supporting security systems

• Experience securing configurations of Linux and/or Unix-like variants

• Proficiency in scripting languages such as shell, Python, Golang, or JavaScript

• Knowledge of networking, software development lifecycle, secure coding practices, and system hardening

• Understanding of software build pipeline applications, systems, and processes

• Working experience with CI/CD pipelines and tools like Jenkins and Argo CD

• Experience leading large, cross-team projects and initiatives

• Familiarity with TLS best practices, ciphers, software signing, and public/private key inf...