Senior Software Engineer II (Security)

Overview

Senior Software Engineer II focused on designing and developing Software Supply Chain Security capabilities.

What you'll do

• Develop SecDevOps machinery that enables secure-by-default frameworks and adoption.
• Build secure libraries, CI templates, and IDE plugins to support security workflows.
• Develop a single pane of glass application for product-team security insights and self-service.
• Lead and contribute to supply chain security initiatives including SBOM generation/consumption, provenance, signing, verification, and trusted release workflows.
• Design automation and policy-driven controls to prove what was built, provenance, and trustability before deployment.
• Provide technical security advice to management and contribute to development guidelines and documentation.

What you'll need

• 6+ years as a software developer in Golang (backend) and JavaScript (frontend, mainly VueJS).
• Expertise developing robust, scalable, well-documented REST APIs.
• Working proficiency building secure CI/CD pipelines with GitHub Actions.
• Experience leveraging AWS services including IAM, SQS, S3, Lambdas, DynamoDB, RDS, EKS, and EC2.
• Working proficiency with infrastructure as code using Terraform.
• Familiarity with software supply chain security concepts such as SBOMs, artifact signing, and provenance attestations.
• Experience implementing secrets management workflows (e.g., Conjur/Vault) is mentioned as a “plus”.

Details

• Location: Bangalore, Karnataka, India (also listed as “Bengaluru Karnataka” in the ATS line).
• Work model: Hybrid (2–3 days a week in the office).