Secure Supply Chain Software Engineer

Tech Aalto Pte ltd; Singapore; On-site; SGD 90,000 - 130,000; Full time

Job summary

Tech Aalto Pte ltd is seeking a Secure Supply Chain Software Engineer to design and build systems that secure the organisation's software supply chain. You will detect vulnerabilities across libraries, OS, and containers and integrate with GitLab CI/CD and attestation systems.

You will partner with infrastructure and security teams, and work with developers across the organisation to embed secure workflows.

Qualifications

• 3+ years of industry experience as a programmer, developer, SWE, or similar job roles.
• General knowledge of multiple languages, and in-depth knowledge of at least one of: Golang, Java, Python
• General knowledge of Linux, Docker, Kubernetes, Terraform, AWS
• Knowledgeable about networking (TCP, UDP, ICMP, ARP, DNS, TLS, HTTP, SSH, etc)
• Experience with DevOps and IAC (Infrastructure as Code)
• Experience with all stages in the lifecycle of developing and running large distributed systems
• Experience managing performance, availability, and scale of mid- to large-sized systems
• Team player, eager to work in a global organization; Highly entrepreneurial and motivated; Strong oral and written communication skills

Responsibilities

• Build and design systems that secure the entirety of organisation software supply chain.
• Build and integrate systems detecting third-party vulnerabilities in libraries, OS and container components, etc.
• Integrate with our GitLab, CI/CD, and build attestation systems.
• Partner effectively with Organisation’s infrastructure teams and other security teams.
• Collaborate with developers across Organisation to ensure our systems are embedded in their workflows.

Skills

Programming experience 3+ years

Golang

Java

Python

Linux

Docker

Kubernetes

Terraform

AWS

Networking basics

DevOps

Infrastructure as Code

Tools

Kafka

Relational databases

SRE best practices

Job description

Secure Supply Chain Software Engineer

The Secure Supply Chain team, within SDLC, is a function focused on ensuring that the code deploys is as secure as possible. We blend third-party tooling with in-house systems to improve the security of many types of code including backend, frontend, infrastructure, and mobile.

HOW YOU WILL FULFILL YOUR POTENTIAL

• Build and design systems that secure the entirety of organisation software supply chain.
• Build and integrate systems detecting third-party vulnerabilities in libraries, OS and container components, etc.
• Integrate with our GitLab, CI/CD, and build attestation systems.
• Partner effectively with Organisation’s infrastructure teams and other security teams.
• Collaborate with developers across Organisation to ensure our systems are embedded in their workflows.

SKILLS AND EXPERIENCE WE ARE LOOKING FOR

• 3+ years of industry experience as a programmer, developer, SWE, or similar job roles.
• General knowledge of multiple languages, and in-depth knowledge of at least one of: Golang, Java, Python
• General knowledge of Linux, Docker, Kubernetes, Terraform, AWS
• Knowledgeable about networking (TCP, UDP, ICMP, ARP, DNS, TLS, HTTP, SSH, etc)
• Experience with DevOps and IAC (Infrastructure as Code)
• Experience with all stages in the lifecycle of developing and running large distributed systems
• Experience managing performance, availability, and scale of mid- to large-sized systems
• Good but not required to have experience in:
  • Kafka or similar event streaming platforms
  • Relational databases
  • SRE best practices
• Team player, eager to work in a global organization
• Highly entrepreneurial and motivated
• Strong oral and written communication skills

VC Panel Competencies:

• Software design and architecture, depth on resume area (e.g., design a producer / consumer architecture, create a performance test framework for a distributed system)

Confidentiality is assured, and only shortlisted candidates will be notified for interviews.