Principal Security Engineer
MathWorks · Natick, MA · 1 wk ago
HybridInformation TechnologyFull-time
Responsibilities
- Design, implement, and continuously improve security controls across our CI/CD pipeline, Artifactory, and developer platforms
- Collaborate with various teams and key stakeholders within the organization to embed security best practices in software delivery workflows
- Lead threat modeling and risk assessments for our build and release pipelines
- Build and deploy custom security solutions and integrations as needed
- Monitor, detect, and respond to threats targeting our development infrastructure
- Drive innovation in automation, security architecture, and systems design
- Foster a strong security culture through knowledge sharing and mentorship
Requirements
- Minimum Qualifications: A bachelor's degree and 10 years of professional work experience (or equivalent experience)
- Additional Qualifications: Proficiency in programming languages such as Python, Rust, or Go; Experience with security threat modeling, penetration testing, and security reviews; Deep understanding of the software development lifecycle (SDLC), particularly in large, complex enterprise environments, and a passion for improving the developer experience; Deep understanding of modern attack vectors targeting software supply-chain through malicious code, third-party libraries, and CI/CD systems; Advanced knowledge of developer tools, internal build and dependency systems; Experience with trusted software supply chain concepts, including security standards and best practices (e.g., SLSA), dependency/package management, vulnerability scanning, signing, provenance, and tools such as TeamCity, Jenkins, GitHub, GitLab, Artifactory, and Kubernetes; Experience with Cloud Native Computing Foundation (CNCF) projects related to CI/CD, security, and developer workflow; Ability to collaborate with large, distributed engineering teams to contextualize and prioritize supply chain threats
Qualifications
Commensurate with experience.
Skills
Not specified.
Benefits
Not specified.
Pay
TBD
Schedule
Not specified.