Java, Python, DevSecOps, OSS Security Engineering

• Strengthen software supply chain security through dependency management, secure package validation, and vulnerability governance practices.
• Partner with engineering teams to evaluate and remediate risks associated with third-party libraries, frameworks, and open-source dependencies.
• Support coordinated vulnerability disclosure and remediation workflows while maintaining confidentiality and security compliance.
• Contribute to vulnerability response activities from intake and validation through patch development, testing, and coordinated release processes.

• Design, implement, and optimize DevSecOps workflows within the Akrites platform deployed on Google Cloud Platform (GCP).
• Integrate security controls into CI/CD pipelines, enabling automated vulnerability detection, policy enforcement, and remediation tracking.
• Enhance platform reliability, observability, and security through automation, infrastructure monitoring, logging, and operational analytics.
• Collaborate with development teams to embed security practices throughout the Software Development Lifecycle (SDLC).

• Build and maintain automated solutions for:

o Vulnerability detection and analysis

o Security incident triage

o Remediation orchestration

o Compliance validation

o Operational workflow automation

• Develop scripts, services, and engineering utilities using Python and Java to eliminate manual processes and improve remediation response times.
• Integrate security tooling into engineering workflows to enable continuous security monitoring and proactive risk reduction.
• Improve engineering efficiency through automated reporting, dashboarding, and security metrics collection.

• Investigate security incidents, vulnerability alerts, and OSS-related threats impacting supported platforms and services.
• Lead technical response activities for security findings and coordinate remediation efforts across engineering teams.
• Document findings, corrective actions, lessons learned, and remediation guidance.
• Support security reviews, threat assessments, and risk management activities for critical OSS technologies.

• Partner with Microsoft Security Engineering, product teams, cloud platform teams, and OSS maintainers to drive strategic security initiatives.
• Provide technical guidance on secure coding, DevSecOps best practices, and vulnerability remediation methodologies.
• Participate in architecture reviews and security design discussions to proactively reduce security risks.
• Contribute to continuous improvement initiatives that enhance platform security, operational excellence, and developer productivity.

• Bachelor's degree in Computer Science, Information Security, Software Engineering, or related field, or equivalent industry experience.
• 8+ years of experience in Software Engineering, DevOps, DevSecOps, Security Engineering, or related disciplines.
• Strong hands-on development experience with Java and Python.
• Experience working with cloud platforms, preferably Google Cloud Platform (GCP).
• Deep understanding of:

o OSS Security

o Vulnerability Management

o Security Automation

• Experience integrating and operating security scanning tools, SAST, DAST, SCA, and dependency management solutions.
• Strong troubleshooting, debugging, and root cause analysis skills.
• Experience with Git-based development workflows, code reviews, and modern software engineering practices.

• Java
• Python
• DevSecOps Engineering
• OSS Security
• Vulnerability Management
• Secure Coding

• CI/CD Automation
• Incident Response
• Security Engineering
• Automation Engineering

• Infrastructure as Code (Terraform preferred)

• Monitoring and Observability Tools

Digital: Terraform; CodeQL; GitHub Advanced Security; Digital: Cloud Security; Security Engineering

Salary Range: $80,000 - $110,000 a year

#LI-NS4

Discretionary Annual Incentive.

Comprehensive Medical Coverage: Medical & Health, Dental & Vision, Disability Planning & Insurance, Pet Insurance Plans.

Family Support: Maternal & Parental Leaves.

Insurance Options: Auto & Home Insurance, Identity Theft Protection.

Convenience & Professional Growth: Commuter Benefits & Certification & Training Reimbursement.

Time Off: Vacation, Time Off, Sick Leave & Holidays.

Legal & Financial Assistance: Legal Assistance, 401K Plan, Performance Bonus, College Fund, Student Loan Refinancing.