Java, Python, DevSecOps, OSS Security Engineering

Java, Python, DevSecOps, OSS Security Engineering

Location: Bellevue, WA (Remote)

Employment Type: Full-Time

Visa Type: USC / GC / GC EAD Only

Experience: 8 10 Years
Must-Have Skills

• 8+ years of experience in Software Engineering, DevOps, DevSecOps, or Security Engineering
• Strong hands-on development experience with Java and Python
• Strong expertise in Open Source Software (OSS) Security
• Experience with OSS vulnerability analysis, triage, validation, prioritization, and remediation
• Strong knowledge of Vulnerability Management and vulnerability intelligence
• Experience analyzing exploitability, attack vectors, business impact, and remediation requirements
• Strong Secure Coding Practices and security standards knowledge
• Experience performing root cause analysis for recurring vulnerabilities
• Experience developing and implementing vulnerability fixes using Java/Python
• Strong understanding of Software Supply Chain Security
• Experience with dependency management, third-party libraries, package validation, and vulnerability governance
• Strong DevSecOps engineering experience
• Experience integrating security controls into CI/CD pipelines
• Hands-on experience with security automation and remediation orchestration
• Experience with security scanning and application security technologies:
  • SAST
  • DAST
  • SCA
  • Dependency Management
• Experience integrating and operating security tooling within engineering workflows
• Experience with Git-based development , code reviews, and modern software engineering practices
• Cloud experience, preferably Google Cloud Platform (GCP)
• Experience building automation for:
  • Vulnerability detection and analysis
  • Security incident triage
  • Remediation orchestration
  • Compliance validation
  • Operational workflows
• Experience investigating security incidents, vulnerability alerts, and OSS-related threats
• Strong troubleshooting, debugging, and RCA skills
• Experience with security reviews, threat assessments, and risk management
• Ability to collaborate with security engineering, product engineering, cloud platform, and OSS teams
• Strong communication and technical leadership skills

Preferred Experience

• Google Cloud Platform (GCP)
• Terraform / Infrastructure as Code
• Docker and Kubernetes container security
• CodeQL
• GitHub Advanced Security
• Cloud Security
• Security Engineering and Automation Engineering
• Incident Response
• Monitoring and Observability
• CI/CD security automation
• Security metrics, reporting, and dashboarding
• Architecture reviews and security design
• Software supply chain security programs
• Coordinated vulnerability disclosure and remediation

Education

• Bachelor's Degree in Computer Science, Information Security, Software Engineering, or related field, or equivalent industry experience

Recruiter Contact: View email address on us.fitly.work