Senior Software Engineer, Security Factory: Code Security

This is a Fully Remote Job

About Our Client:

The organization operates in the DevSecOps industry, focusing on improving developer productivity, operational efficiency, and reducing security and compliance risks. It addresses challenges in software development and security by providing an intelligent orchestration platform that supports faster, more secure software delivery. The platform is trusted by over 50 million users and serves more than half of the Fortune 100 companies, indicating significant scale and impact.

About the Opportunity:

The SENIOR SOFTWARE ENGINEER, SECURITY FACTORY: CODE SECURITY, contributes to securing software by developing tools that identify and remediate code and dependency vulnerabilities. This role is responsible for enhancing security analysis engines with both rule-based and AI-driven capabilities, parsing dependency data, and automating remediation processes. The position has a direct impact on improving the security posture of software projects by integrating comprehensive security checks and automated fixes.

Responsibilities:

• Lead team initiatives from design to delivery with minimal guidance
• Transition single-engineer systems to team ownership through documentation and testing
• Design and implement analyzers combining deterministic and AI-driven analysis
• Develop evaluation tools to measure analyzer accuracy against known vulnerabilities
• Package analyzers for various execution environments with standardized security reporting
• Implement parsing of manifests, lockfiles, and SBOMs for dependency identification
• Enhance automated remediation services for security advisories and dependency updates
• Address complex technical problems affecting team-wide quality, security, and performance
• Mentor intermediate engineers and uphold coding standards
• Participate in on-call rotations for troubleshooting and urgent issue resolution

Requirements:

• Experience building LLM tooling with sound judgment on output reliability
• Strong professional experience in systems programming languages, especially Go and/or Rust
• Familiarity with package managers and dependency ecosystems like npm, Maven, pip, Bundler, or Cargo
• Demonstrated application security expertise and knowledge of vulnerability classes (OWASP Top 10, CWE)
• Proven ability to independently manage ambiguous problems and deliver results
• Clear and concise communication skills and ability to write effective design proposals

Pay Range and Compensation Package:

• The pay range and compensation package for this role will be determined based on the candidate's experience, skills, and other relevant factors.

Benefits & Perks:

• Flexible work arrangements

Equal Opportunity Statement: Our client is an equal opportunity employer. They celebrate diversity and are committed to creating an inclusive environment for all employees. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, or national origin.

Note:

TalentHop is a recruitment partner of this role. Please note that all employment decisions, including candidate assessment, interviews, hiring, compensation, and employment terms, are made exclusively by the hiring employer.