Job Description
- Experience in DevSecOps, Application Security, or Software Security.
- Hands-on experience with Snyk, Sonatype, Mend, Black Duck, or equivalent.
- Strong expertise in Software Supply Chain Security, Open Source Security, SBOM, CI/CD Security, Containers, Kubernetes, AWS/Azure/GCP.
- Knowledge of SLSA, Sigstore, SPDX, CycloneDX, CVE/CVSS, Python/Bash scripting.
- Exposure to AI Software Supply Chain Security, AIBOM concepts, and AI/LLM security is preferred.
- Experience with software composition analysis (SCA) tools and dependency management (Maven, npm, pip, etc.)
- Excellent communication skills, with the ability to explain complex security concepts to non-technical stakeholders.
- Desirable to have one or more industry-recognized cybersecurity-related certifications including CISSP, CRISC, CISM, OSCP.
About this job listing
This job opportunity is provided through our
external job listing network. MyJobAlerts helps
you discover job opportunities and redirects you
to the original listing to apply.