Experienced Security Tools Engineer (Static Code Analysis)

Location: Lund, Sweden

Company

hirify.global develops network technology solutions for video surveillance, access control, intercom, and audio systems, enhanced by intelligent analytics applications.

What you will do

• Configure and refine Coverity static analysis for AXIS OS developers.
• Support developers in using static analysis to find and resolve vulnerabilities and quality issues.
• Collaborate with AXIS OS product management on compliance requirements.
• Evaluate and introduce new static code analysis features and capabilities.
• Contribute to vulnerability scanning, supply chain evaluation, and other security tooling initiatives.
• Align security tooling with the wider Platform Engineering ecosystem.

Requirements

• University degree in Computer Science or a comparable qualification.
• Professional software development experience with an interest in application security and code quality.
• Solid understanding of software development lifecycles, with a focus on Continuous Integration.
• Hands-on experience with static code analysis tools such as Coverity or SonarQube.
• Knowledge of C and C++, secure coding practices, and standards such as CERT C/C++ or MISRA C.
• Experience with vulnerability management, supply chain security, compliance, embedded development, Git, and code review tools such as Gerrit.

Culture & Benefits

• Work in a collaborative and autonomous Platform Engineering team.
• Contribute to open-source communities and engage with open-source projects.
• Develop tools that directly affect the security and quality of AXIS OS.
• Learn from experienced experts, developers, and testers while experimenting with new ideas.
• Openness, trust, teamwork, work-life balance, fika, lunches, and social activities are part of the work environment.