DevSecOps

Job Description

\n
• Experience in DevSecOps, Application Security, or Software Security.
\n
• Hands-on experience with Snyk, Sonatype, Mend, Black Duck, or equivalent.
\n
• Strong expertise in Software Supply Chain Security, Open Source Security, SBOM, CI/CD Security, Containers, Kubernetes, AWS/Azure/GCP.
\n
• Knowledge of SLSA, Sigstore, SPDX, CycloneDX, CVE/CVSS, Python/Bash scripting.
\n
• Exposure to AI Software Supply Chain Security, AIBOM concepts, and AI/LLM security is preferred.
\n
• Experience with software composition analysis (SCA) tools and dependency management (Maven, npm, pip, etc.)
\n
• Excellent communication skills, with the ability to explain complex security concepts to non-technical stakeholders.
\n
• Desirable to have one or more industry-recognized cybersecurity-related certifications including CISSP, CRISC, CISM, OSCP.
\n