DevSecOps Engineer: SBOM & Supply Chain Security

Hewlett Packard Enterprise Development LP; San Juan (PR); Hybrid; USD 120,000 - 160,000; Full time

Benefits offered by this job

Relocation support

Job summary

Hewlett Packard Enterprise Development LP is seeking a DevSecOps SCA Engineer for a hybrid role requiring in-office presence about 2 days per week at an HPE office in Puerto Rico. The role focuses on security-driven software development, SBOM generation, and integrating SCA into CI/CD pipelines with cross-functional collaboration.

You will design and maintain software solutions, ensure SBOM quality and compliance, and work with engineering, security, and compliance teams to manage

Qualifications

• Bachelor’s or Master’s degree in Computer Science, Information Systems, or equivalent.
• Typically 5-8 years of experience in software development, security engineering, DevSecOps, or platform engineering roles with a focus on security and supply chain integrity.

Responsibilities

• Lead the design, development, and maintenance of software solutions, including enhancements, updates, and programming changes for system software, utilities, and security tools.
• Develop and operate automated pipelines for SBOM generation during build and release processes for containerized and non-containerized applications.
• Integrate SCA, dependency tracking, artifact signing, and supply chain security controls into CI/CD pipelines.
• Define and enforce policies for SBOM quality, format compliance (e.g., SPDX, CycloneDX), and attestations.
• Collaborate with engineering, security, and compliance teams on vulnerability triage, exception handling, and audit readiness.
• Analyze system designs and determine coding, integration, and testing activities based on project objectives and architecture.
• Write and execute comprehensive test plans, protocols, and documentation; debug and resolve issues related to code, integration, and security controls.
• Lead cross-functional project teams, including internal and outsourced partners, to deliver reliable, cost-effective, and high-quality solutions.
• Develop dashboards and reports to monitor supply chain posture, SLA adherence, and provide executive insights.
• Represent the software engineering team in all phases of complex development projects, providing guidance and mentoring to less experienced staff.

Skills

SBOM standards

SCA tools

CI/CD pipelines

Python

Go

Bash

PowerShell

Cloud-native architectures

Monitoring tools

Vulnerability triage

Communication skills

Education

Bachelor’s or Master’s degree in Computer Science/Information Systems

Tools

Trivy

BlackDuck

Grafana

Datadog

Job description

Hewlett Packard Enterprise Development LP is seeking a DevSecOps SCA Engineer for a hybrid role requiring in-office presence about 2 days per week at an HPE office in Puerto Rico. The role focuses on security-driven software development, SBOM generation, and integrating SCA into CI/CD pipelines with cross-functional collaboration.

You will design and maintain software solutions, ensure SBOM quality and compliance, and work with engineering, security, and compliance teams to manage