Static Code Analysis Engineer – Security Tools

Axis Communications; Lunds kommun; On-site; SEK 750,000 - 1,000,000; Full time

Job summary

Axis Communications in Lund is seeking an Experienced Security Tools Engineer to drive static code analysis for AXIS OS. You will configure and tailor Coverity, collaborate with product managers, and support developers to find vulnerabilities and ensure code quality.

The role emphasizes embedded C/C++ development, vulnerability management, and ongoing tool enhancements within a collaborative Platform Engineering environment.

Qualifications

• University degree in Computer Science or a comparable qualification.
• Hands-on experience with software development and CI/CD.
• Solid understanding of software development lifecycle with focus on CI.
• Hands-on experience with static code analysis tools such as Coverity or SonarQube.
• Knowledge of C and C++ development and secure coding practices.
• Familiarity with vulnerability management and supply chain security.
• Experience with embedded development and Git workflows.

Responsibilities

• Configure and refine Coverity's static analysis capabilities to stay effective for AXIS OS developers.
• Help AXIS OS developers use static code analysis effectively to find and resolve vulnerabilities and quality issues.
• Ensure Coverity setup supports compliance needs with product management.
• Collaborate with AXIS OS developers to understand needs and improve tools and services.
• Evaluate and introduce new features related to static code analysis.
• Collaborate with security tooling team on vulnerability scanning and supply chain evaluation.
• Align with area experts to fit tools into the bigger Platform Engineering picture.

Skills

Static code analysis

C/C++ development

CI/CD

Vulnerability management

Supply chain security

Embedded development

Education

University degree in Computer Science or comparable qualification

Tools

Coverity

SonarQube

Gerrit

Job description

Axis Communications in Lund is seeking an Experienced Security Tools Engineer to drive static code analysis for AXIS OS. You will configure and tailor Coverity, collaborate with product managers, and support developers to find vulnerabilities and ensure code quality.

The role emphasizes embedded C/C++ development, vulnerability management, and ongoing tool enhancements within a collaborative Platform Engineering environment.