Hybrid DevSecOps Engineer: Secure CI/CD & SBOM Lead

Hewlett Packard Enterprise

San Juan (PR)

Hybrid

USD 140,000 - 170,000

Full time

25 hours ago

Be an early applicant

Get more replies from employers

Send a job-specific resume in minutes.

Benefits offered by this job

Relocation support

Job summary

Hewlett Packard Enterprise in Puerto Rico, San Juan area is seeking a senior software engineer focused on security and supply chain integrity. The role emphasizes SBOM workflows, SPDX/CycloneDX compliance, and secure CI/CD practices.

You will mentor teams and lead cross‑functional projects to deliver secure software solutions for cloud and edge platforms. Relocation support is provided for eligible candidates and relocation to HPE offices in Puerto Rico is anticipated.

Qualifications

Bachelor’s or Master’s degree in Computer Science, Information Systems, or equivalent.
Typically 5–8 years of software development and security-focused experience.
Experience with SBOM standards and software supply chain security concepts.

Responsibilities

Lead design, development, and maintenance of software solutions, including security tools and system software.
Develop and operate automated SBOM generation pipelines during build and release processes.
Integrate SCA, dependency tracking, and supply chain security controls into CI/CD pipelines.
Define SBOM quality policies and attestations (SPDX, CycloneDX).
Collaborate with engineering, security, and compliance teams on vulnerabilities and audits.
Analyze system designs and oversee coding, testing, and integration activities.
Write and execute test plans; debug and resolve issues related to code and security controls.
Lead cross-functional project teams to deliver reliable, cost-effective solutions.
Develop dashboards to monitor supply chain posture and executive insights.