Engineer II, Software Assurance, Product Security (Remote) (Cybersecurity)

Location: USA - Remote

Salary: $100,000–$145,000 per year, with eligibility for bonuses and equity grants.

Company

Cybersecurity company building an AI-native platform that protects organizations, their data, and software environments from advanced threats.

What you will do

• Assess open-source software risks and provide security guidance on usage, repository configuration, and compliance.
• Implement and maintain controls for public and private GitHub organizations, including repository guardrails, secret scanning, branch protection, and access management.
• Harden the ingestion, development, usage, and distribution of open-source code across the enterprise.
• Investigate open-source dependencies and third-party packages for supply-chain threats such as typosquatting and dependency confusion.
• Build security tooling and automation to address control gaps and improve operational efficiency.
• Collaborate with engineering teams on initiatives that secure source-code repositories and software supply-chain systems.

Requirements

• Experience implementing, supporting, and monitoring software security systems in an engineering role.
• Strong experience with GitHub, including repository administration, GitHub Actions, branch protection rules, and access management.
• Experience identifying and mitigating open-source risks, including software composition analysis, dependency management, and licensing risks.
• Experience securing Linux or other Unix-like systems and familiarity with artifact storage tools such as Artifactory and S3.
• Proficiency in Python, Golang, Shell, JavaScript, or another common scripting language for security automation.
• Knowledge of the software development lifecycle, secure coding, code reviews, source-control security, and collaborative cross-team security work.

Nice to have

• Experience with LogScale, Splunk, DataDog, Prometheus, or similar monitoring and log aggregation tools.
• Understanding of CI/CD integrations and tools such as Jenkins and Argo CD.
• Experience securing large-scale cloud platforms.
• Experience using AI technologies for decision-making, workflow optimization, or vulnerability triage.

Culture & Benefits

• Remote work environment with an emphasis on flexibility, autonomy, and effective communication.
• Health, physical wellness, and mental wellness programs.
• Competitive vacation and holidays, plus paid parental and adoption leave.
• Professional development opportunities for employees at every level.
• Compensation package including salary, bonuses, equity grants, health insurance, 401(k), and paid time off.
• Employee networks, geographic groups, volunteer opportunities, and office amenities.