DevSecOps SCA Engineer

BMA Group Global; San Juan (PR); Hybrid; USD 120.000 - 150.000; Vollzeit

Benefits dieser Stelle

Relocation assistance

Hybrid work model

Zusammenfassung

BMA Group Global is seeking an experienced DevSecOps SCA Engineer to strengthen software supply chain security through automation, vulnerability management, and secure CI/CD practices. The role focuses on integrating SBOM, SPDX/CycloneDX, and SLSA standards into cloud-native development environments.

The ideal candidate will design secure pipelines, automate SBOM generation, and monitor security metrics with Grafana/Datadog while collaborating with engineering teams.

Qualifikationen

• Requires Bachelor's degree in Computer Science, Information Systems, or related field.
• 5–8 years of experience in DevSecOps, software development, or security engineering.
• Experience with SBOM, SCA tools, and software supply chain security.
• Strong knowledge of CI/CD pipelines, cloud-native technologies, and vulnerability management.
• Proficiency in Python, Go, Bash, or PowerShell.
• Familiarity with Grafana, Datadog, or similar monitoring tools.

Aufgaben

• Design and implement secure CI/CD pipelines with SCA and supply chain security controls.
• Automate SBOM generation, dependency tracking, and artifact signing.
• Manage vulnerabilities and ensure compliance with SPDX, CycloneDX, and SLSA standards.
• Collaborate with engineering and security teams to improve security practices.
• Develop monitoring dashboards and automate security reporting.

Kenntnisse

DevSecOps

CI/CD pipelines

SBOM

SCA tools

Python/Go/Bash/PowerShell

Monitoring tools (Grafana/Datadog)

Ausbildung

Bachelor's degree in Computer Science/IS

Tools

SCA tools (Trivy/Black Duck)

Monitoring tools (Grafana/Datadog)

Jobbeschreibung

Work Model: Hybrid – 2 days onsite per week

Relocation Assistance: Available for eligible U.S. Citizens

Position Summary

We are seeking an experienced DevSecOps SCA Engineer to strengthen software supply chain security through automation, vulnerability management, and secure CI/CD practices. This role focuses on integrating Software Composition Analysis (SCA), Software Bill of Materials (SBOM), and security compliance controls into modern cloud-native development environments.

Key Responsibilities

• Design and implement secure CI/CD pipelines with SCA and supply chain security controls.
• Automate SBOM generation, dependency tracking, and artifact signing.
• Manage vulnerabilities and ensure compliance with SPDX, CycloneDX, and SLSA standards.
• Collaborate with engineering and security teams to improve security practices.
• Develop monitoring dashboards and automate security reporting.

Qualifications

• Bachelor's degree in Computer Science, Information Systems, or a related field.
• 5–8 years of experience in DevSecOps, software development, or security engineering.
• Experience with SBOM, SCA tools (Trivy, Black Duck, or similar), and software supply chain security.
• Strong knowledge of CI/CD pipelines, cloud-native technologies, and vulnerability management.
• Proficiency in Python, Go, Bash, or PowerShell.
• Familiarity with Grafana, Datadog, or similar monitoring tools.

Why Consider This Opportunity?

Join an innovative technology environment offering competitive compensation, comprehensive benefits, and relocation assistance for eligible U.S. Citizens moving to Puerto Rico.