Remote Security Engineer II, Open-Source & Product Security

Socket.dev; Virginia (IL); Hybrid; USD 100,000 - 145,000; Full time

Benefits offered by this job

Health insurance

401k matching

Paid time off

Professional development

Job summary

CrowdStrike is seeking a Security Engineer II to secure the software supply chain by assessing, designing, and implementing security controls across open-source footprints and upstream dependencies. You will perform technical security assessments of GitHub organizations, monitor for malicious packages, and build tooling to close gaps.

You will collaborate on cross-cutting projects to harden code-hosting environments, implement repo guardrails, secret scanning, and secure development practices.

Qualifications

• Experience in engineering roles implementing, supporting, and monitoring security systems.
• Strong GitHub experience: repository administration, Actions, protections, and access management.
• Familiarity with artifact storage tools and SCA/dependency management practices.

Responsibilities

• Assess risk and provide security guidance on open-source usage and repository configurations.
• Implement and maintain controls to secure GitHub orgs, including guardrails and secret scanning.
• Harden open-source code usage, development, ingestion, and distribution across the enterprise.
• Investigate open-source dependencies to mitigate supply chain risks.
• Advocate for secure coding and open-source compliance within the org.
• Contribute to security initiatives to harden the software supply chain and code-hosting environments.

Skills

Open-source security

GitHub administration

GitHub Actions

SCA / dependency management

Scripting (Python/Go/Shell/JS)

Linux/Unix

Security automation

Cross-team collaboration

Tools

Artifactory

S3

Jenkins

Argo CD

Splunk

LogScale

DataDog

Prometheus

Job description

CrowdStrike is seeking a Security Engineer II to secure the software supply chain by assessing, designing, and implementing security controls across open-source footprints and upstream dependencies. You will perform technical security assessments of GitHub organizations, monitor for malicious packages, and build tooling to close gaps.

You will collaborate on cross-cutting projects to harden code-hosting environments, implement repo guardrails, secret scanning, and secure development practices.