Engineer II, Software Assurance, Product Security in United States Embassy at Jobgether

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for an Engineer II, Software Assurance, Product Security based in United States.

This remote role offers the opportunity to strengthen software security within a large-scale technology environment focused on protecting critical systems and applications.
The position centers on securing software supply chains, open-source ecosystems, and code-hosting environments against evolving threats.
You will collaborate with engineering teams to assess risks, implement security controls, and improve secure development practices.
The role combines hands-on security engineering, automation, and strategic guidance to help build resilient software systems.
You will contribute to initiatives that protect products, customers, and internal development workflows from sophisticated cyber threats.
Ideal candidates are security-minded engineers who enjoy solving complex problems and driving practical improvements across teams.

As an Engineer II, Software Assurance, Product Security, you will help secure software development processes by assessing risks, implementing protective controls, and improving the security posture of source code and software supply chains. You will work closely with engineering teams to identify vulnerabilities, automate security processes, and promote secure development practices.

• Assess software supply chain risks and provide security guidance to engineering teams regarding open-source usage and repository configurations.
• Implement and maintain security controls for public and private source code repositories, including repository guardrails, access management, and secret scanning.
• Secure open-source software usage, development workflows, ingestion processes, and distribution practices across the organization.
• Investigate third-party dependencies and open-source packages to identify and mitigate risks such as dependency confusion, malicious packages, and licensing concerns.
• Develop automation and tooling to improve security checks, vulnerability identification, and operational efficiency.
• Contribute to security initiatives focused on strengthening code-hosting environments and software development workflows.
• Collaborate with cross-functional teams to promote secure coding practices and improve software security awareness.
• Support continuous improvement of security processes through analysis, documentation, and implementation of practical solutions.

The ideal candidate has experience in software security engineering, strong knowledge of development environments, and the ability to collaborate effectively with engineering teams in a remote setting. This role requires technical expertise in source control security, automation, and secure software development practices.

• Experience working in an engineering role focused on implementing, supporting, or monitoring software security systems.
• Strong experience with GitHub, including repository administration, GitHub Actions, branch protection rules, and access management.
• Familiarity with source control platforms such as GitLab or BitBucket.
• Experience with artifact storage solutions such as Artifactory and S3.
• Knowledge of software composition analysis (SCA), dependency management, and open-source security risks.
• Experience securing Linux and/or Unix-based environments.
• Proficiency in scripting languages such as Python, Golang, Shell, or JavaScript for security automation.
• Strong understanding of software development lifecycle (SDLC), secure coding practices, code reviews, and source control security.
• Experience leveraging AI technologies to improve security workflows, automate analysis, or enhance decision-making.
• Strong communication and collaboration skills, with the ability to work effectively in a remote environment.
• Ability to independently identify security challenges and partner with teams to develop practical solutions.

• Competitive compensation package with base salary ranging from $100,000 to $145,000 annually.
• Eligibility for bonuses and equity opportunities.
• Comprehensive health and wellness benefits.
• Retirement savings plan with company support.
• Paid vacation and competitive time-off programs.
• Paid parental and adoption leave.
• Professional development opportunities and career growth support.
• Employee networks, community initiatives, and volunteer opportunities.
• Flexible remote work environment with autonomy and ownership.
• Opportunity to contribute to impactful cybersecurity initiatives protecting critical technology platforms.