Lead Software Engineer-Golang -Securiy-BOM

Lead Software Engineer

As a Lead Software Engineers effectively collaborate with cross functional teams including senior stakeholders to deliver on projects. You will utilize your deep technical expertise and skillset by representing software development engineering in overall project management by specifying and driving progress towards development activities, milestones, and timelines.

About the Role

In this role, As a Lead Software Engineer, you will:

• Be a Technical Leader provide thought leadership and guidance in setting the vision and direction to deliver customer-facing research products. Work with technology teams and beyond to realize their implementation. Research and recommend industry standards and best practices.
• Be an efficient Stakeholder Manager - engage, collaborate, and influence peers, senior management, junior engineers, and business partners. Act as point of contact in resolving stakeholder issues.
• Be a Team Player – ability to work in a collaborative and inclusive team-oriented environment, partner with cross functional and remote teams, draw out strong design ideas from diverse teams and high performing engineers, and translate requirements into actionable development items.
• Be a Decision Maker - make quick and effective data driven decisions, with good problem solving and analytical skills to infer qualitative and quantitative data, while recognizing and communicating tradeoffs.
• Be an Effective Communicator – ability to articulate complex technical issues concisely; ability to target your audience, actively listen, and value diverse ideas.
• Be an Agile Person – with a strong sense of urgency and a desire to work in a fast-paced dynamic environment to deliver solutions against strict timelines. Be Curious & Innovative – ability to question the status quo. Continuously update yourself with industry trends, next generation technology, and software development best practices.

About you:

You’re a fit for the role of a Lead Software Engineer if you have:

Must Have

• Solid understanding of SBOM management processes, formats, and toolchains.
• Strong understanding of software development lifecycle (SDLC).
• Understanding of software supply chain security concepts.
• Familiarity with software composition analysis (SCA) and dependency management.
• Understanding of regulatory frameworks and security frameworks (NIST, FedRAMP, CISA, ISO, ...)
• Familiarity of main software supply chain security frameworks (SLSA, in-toto).
• Understanding the Sigstore set of standards and tools is a plus.
• Understanding of containers technologies (Docker, Kubernetes) – experience is a plus.
• Knowledge of cryptography concepts (digital signatures, symmetric and asymmetric encryption, hashing, ...)
• Have 10+years relevant experience, where in 4+ years as a software development lead
• Experience partnering with Platform engineering team, Product owners, architects, and technology leaders to establish, promote, and advance development strategies and best practices.
• Hands-on with Golang, SQL Python, JavaScript, TypeScript, Vue.js (or proficient with reactive JavaScript frameworks) and HTML.
• Automation and scripting: proficiency with Bash, PowerShell.
• Working proficiency leveraging and operating the AWS services such as (but not limited to) IAM, SQS, S3, Lambdas, CloudFormation, CloudFront, DynamoDB, RDS, EKS/ECS, and EC2.

Nice to Have

• Can take on any programming assignments autonomously and deliver.
• Experience in developing robust, scalable, and well-documented REST APIs.
• All things as-code mindset to expand to adjacent security teams.
• Experience with Testing Frameworks such as Jest/Vitest.
• Robust analytical skills with the ability to synthesize business requirements with technology capabilities to produce coherent software development and technical designs.
• Ability to articulate technical strategy, value, and risks to technical and non-technical audiences.
• Strong written and verbal communication experience including cultural and language awareness.
• Strong problem-solving mindset.
• Strong documentation abilities.
• Experience with Infrastructure as Code (IaC) such as Terraform.
• Comprehension of SOLID principles
• Hands-on security engineering or application security experience a plus.

Understanding of OWASP Top 10 vulnerabilities, and how best to mitigate.

• Basic understanding of authentication/authorization (a12n/a11n) flows.
• Competency in Snowflake and Postgres Database technologies and administration
• Have a bachelor’s or master’s degree in computer science or related field.