Build Security Engineer

What you'll do

• Conduct threat modeling and security assessments of critical build infrastructure.
• Develop and maintain technical solutions to mitigate risks within the software build pipeline.
• Lead penetration tests and red team exercises targeting the software build path.
• Research vulnerabilities in critical software components and recommend proactive mitigations.
• Write and maintain test cases to validate the effectiveness of security controls.
• Create and maintain documentation outlining security guidelines and best practices for engineering teams.
• Provide guidance to engineering teams on implementing security measures and adhering to standards.

What we're looking for

• 3+ years of experience in cybersecurity with hands-on experience in threat modeling, security assessments, or penetration testing.
• Experience in a software engineering or security operations role.
• Experience with scripting or programming languages such as Python or Bash.
• Experience working cross-functionally with engineering teams on security requirements or controls.
• Experience conducting penetration testing or red team exercises targeting build pipelines or software supply chain components (preferred).
• Experience leveraging LLMs safely to accelerate various security workflows (preferred).
• Experience with container orchestration platforms such as Kubernetes (preferred).
• Proficiency in additional programming languages such as Go (Golang) or Perl (preferred).