DevSecOps

Experience in DevSecOps, Application Security, or Software Security.
Hands-on experience with Snyk, Sonatype, Mend, Black Duck, or equivalent.
Strong expertise in Software Supply Chain Security, Open Source Security, SBOM, CI/CD Security, Containers, Kubernetes, AWS/Azure/GCP.
Knowledge of SLSA, Sigstore, SPDX, CycloneDX, CVE/CVSS, Python/Bash scripting.
Exposure to AI Software Supply Chain Security, AIBOM concepts, and AI/LLM security is preferred.
Experience with software composition analysis (SCA) tools and dependency management (Maven, npm, pip, etc.)
Excellent communication skills, with the ability to explain complex security concepts to non-technical stakeholders.
Desirable to have one or more industry-recognized cybersecurity-related certifications including CISSP, CRISC, CISM, OSCP.

Work arrangement
No