Java, Python, DevSecOps, OSS Security Engineering

HEAD OF PRODUCT MARKETING Hey, I’m , and I lead marketing at Outpost. I’m looking for a senior, creative, borderline-obsessive product marketer to help us lead a new category of …

• 1 month ago +

• 8+ years of experience in Software Engineering, DevOps, DevSecOps, or Security Engineering
• Strong hands-on development experience with Java and Python
• Strong expertise in Open Source Software (OSS) Security
• Experience with OSS vulnerability analysis, triage, validation, prioritization, and remediation
• Strong knowledge of Vulnerability Management and vulnerability intelligence
• Experience analyzing exploitability, attack vectors, business impact, and remediation requirements
• Strong Secure Coding Practices and security standards knowledge
• Experience performing root cause analysis for recurring vulnerabilities
• Experience developing and implementing vulnerability fixes using Java/Python
• Strong understanding of Software Supply Chain Security
• Experience with dependency management, third-party libraries, package validation, and vulnerability governance
• Strong DevSecOps engineering experience
• Experience integrating security controls into CI/CD pipelines
• Hands-on experience with security automation and remediation orchestration

• Experience with security scanning and application security technologies:

• SAST
• DAST
• SCA
• Dependency Management
• Experience integrating and operating security tooling within engineering workflows
• Experience with Git-based development, code reviews, and modern software engineering practices
• Cloud experience, preferably Google Cloud Platform (GCP)

• Experience building automation for:

• Vulnerability detection and analysis
• Security incident triage
• Remediation orchestration
• Compliance validation
• Operational workflows
• Experience investigating security incidents, vulnerability alerts, and OSS-related threats
• Strong troubleshooting, debugging, and RCA skills
• Experience with security reviews, threat assessments, and risk management
• Ability to collaborate with security engineering, product engineering, cloud platform, and OSS teams
• Strong communication and technical leadership skills

Preferred Experience

• Google Cloud Platform (GCP)
• Terraform / Infrastructure as Code
• Docker and Kubernetes container security
• CodeQL
• GitHub Advanced Security
• Cloud Security
• Security Engineering and Automation Engineering
• Incident Response
• Monitoring and Observability
• CI/CD security automation
• Security metrics, reporting, and dashboarding
• Architecture reviews and security design
• Software supply chain security programs
• Coordinated vulnerability disclosure and remediation

Education

• Bachelor’s Degree in Computer Science, Information Security, Software Engineering, or related field, or equivalent industry experience

At Qualtrics, we create software the world’s best brands use to deliver exceptional frontline experiences, build high-performing teams, and design products people love. But we are …