> Markdown version of [/jobs/ext/3843499-senior-software-engineer-security-factory-code-security](https://www.wearedevelopers.com/jobs/ext/3843499-senior-software-engineer-security-factory-code-security). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Senior Software Engineer, Security Factory: Code Security - **Company:** TALENTHOP LLC - **Location:** United States (Remote available) - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Artificial Intelligence, Apache Maven, Open Web Application Security, Package Management Systems, Parsing, System Programming, Bundler, Large Language Models, Software Security, Software Coding - **Published:** October 20, 2026 - **Apply:** https://arc.dev/remote-jobs/j/redirect/pszcb4eol3 ## About the Role * Experience building LLM tooling with sound judgment on output reliability * Strong professional experience in systems programming languages, especially Go and/or Rust * Familiarity with package managers and dependency ecosystems like npm, Maven, pip, Bundler, or Cargo * Demonstrated application security expertise and knowledge of vulnerability classes (OWASP Top 10, CWE) * Proven ability to independently manage ambiguous problems and deliver results * Clear and concise communication skills and ability to write effective design proposals ## Description The SENIOR SOFTWARE ENGINEER, SECURITY FACTORY: CODE SECURITY, contributes to securing software by developing tools that identify and remediate code and dependency vulnerabilities. This role is responsible for enhancing security analysis engines with both rule-based and AI-driven capabilities, parsing dependency data, and automating remediation processes. The position has a direct impact on improving the security posture of software projects by integrating comprehensive security checks and automated fixes., * Lead team initiatives from design to delivery with minimal guidance * Transition single-engineer systems to team ownership through documentation and testing * Design and implement analyzers combining deterministic and AI-driven analysis * Develop evaluation tools to measure analyzer accuracy against known vulnerabilities * Package analyzers for various execution environments with standardized security reporting * Implement parsing of manifests, lockfiles, and SBOMs for dependency identification * Enhance automated remediation services for security advisories and dependency updates * Address complex technical problems affecting team-wide quality, security, and performance * Mentor intermediate engineers and uphold coding standards * Participate in on-call rotations for troubleshooting and urgent issue resolution