Senior Software Engineer, Security Factory: Code Security

TALENTHOP LLC
United States
7 days ago
Apply on arc.dev
Prepare application

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Experience level
Expert
Working hours
Regular working hours
Job source

Tech stack

Artificial Intelligence Apache Maven Open Web Application Security Package Management Systems Parsing System Programming Bundler Large Language Models Software Security Software Coding

Job description

The SENIOR SOFTWARE ENGINEER, SECURITY FACTORY: CODE SECURITY, contributes to securing software by developing tools that identify and remediate code and dependency vulnerabilities. This role is responsible for enhancing security analysis engines with both rule-based and AI-driven capabilities, parsing dependency data, and automating remediation processes. The position has a direct impact on improving the security posture of software projects by integrating comprehensive security checks and automated fixes., * Lead team initiatives from design to delivery with minimal guidance

  • Transition single-engineer systems to team ownership through documentation and testing
  • Design and implement analyzers combining deterministic and AI-driven analysis
  • Develop evaluation tools to measure analyzer accuracy against known vulnerabilities
  • Package analyzers for various execution environments with standardized security reporting
  • Implement parsing of manifests, lockfiles, and SBOMs for dependency identification
  • Enhance automated remediation services for security advisories and dependency updates
  • Address complex technical problems affecting team-wide quality, security, and performance
  • Mentor intermediate engineers and uphold coding standards
  • Participate in on-call rotations for troubleshooting and urgent issue resolution

Requirements

  • Experience building LLM tooling with sound judgment on output reliability
  • Strong professional experience in systems programming languages, especially Go and/or Rust
  • Familiarity with package managers and dependency ecosystems like npm, Maven, pip, Bundler, or Cargo
  • Demonstrated application security expertise and knowledge of vulnerability classes (OWASP Top 10, CWE)
  • Proven ability to independently manage ambiguous problems and deliver results
  • Clear and concise communication skills and ability to write effective design proposals

Benefits & conditions

Pay Range and Compensation Package:

  • The pay range and compensation package for this role will be determined based on the candidate’s experience, skills, and other relevant factors.

Benefits & Perks:

  • Flexible work arrangements

Equal Opportunity Statement: Our client is an equal opportunity employer. They celebrate diversity and are committed to creating an inclusive environment for all employees. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, or national origin.

Note:

TalentHop is a recruitment partner of this role. Please note that all employment decisions, including candidate assessment, interviews, hiring, compensation, and employment terms, are made exclusively by the hiring employer.

About the company

The organization operates in the DevSecOps industry, focusing on improving developer productivity, operational efficiency, and reducing security and compliance risks. It addresses challenges in software development and security by providing an intelligent orchestration platform that supports faster, more secure software delivery. The platform is trusted by over 50 million users and serves more than half of the Fortune 100 companies, indicating significant scale and impact.

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on arc.dev
Prepare application

Good distractions

Loading talks and stories from around this role…