Supply Chain Security Engineer

About the role

This role is responsible for securing our base OS images, ensuring all open-source software (OSS) dependencies are scanned and patched, and integrating cutting-edge security tools into our CI/CD pipeline. BA/BS in Computer Science, Cybersecurity, or a related field (or equivalent industry experience).

What you'll do

• Implement and improve the vulnerability management lifecycle, ensuring our entire tech stack is free from known vulnerabilities/CVEs
• Continuously scan, monitor, and patch OSS dependencies to mitigate supply chain risks and enforce best practices for dependency management by integrating artifact…
• Improve the supply chain vulnerability scoring mechanism to take into account the environmental/impact controls and the reachability factors
• Research on ways to reduce the supply chain vulnerability footprint across Python, Java, GO, npm ecosystems and base layers
• Create hardened images which can be used across multiple deployment stacks

What you need

• 3–6 yrs of experience
• Supply chain
• Vulnerability assessment
• Python
• CI/CD
• Java
• Go
• B.Sc or BA or B.Tech or B.E.

Good to have

• OWASP
• C++
• Test cases
• AWS
• GCP
• Azure