Secure SDLC Engineer: Build Guardrails & Secure Pipelines

InfoSum Ltd; United States; Remote; USD 120,000 - 180,000; Full time

Job summary

InfoSum Ltd is seeking a security-focused engineer who collaborates with development teams to embed security into design and build processes. You will review architecture proposals, assess code before it ships, and maintain automated security scanning in the CI/CD pipeline.

You will turn recurring findings into guardrails, reduce noise, and help teams avoid repeating mistakes. Nice to have: threat modelling, Semgrep or CodeQL rules, and open source contributions.

Qualifications

• Reads and writes production code in at least one language.
• Knows the common vulnerability classes by mechanism, not by name.
• Has shipped a fix somebody else had to maintain.

Responsibilities

• Review code and designs for security consequences.
• Own the scanning pipeline and keep its noise down.
• Turn each recurring finding into a guardrail.

Skills

Code review

Security know-how

Bug fixing experience

Threat modelling

Tools

Semgrep

CodeQL

Job description

InfoSum Ltd is seeking a security-focused engineer who collaborates with development teams to embed security into design and build processes. You will review architecture proposals, assess code before it ships, and maintain automated security scanning in the CI/CD pipeline.

You will turn recurring findings into guardrails, reduce noise, and help teams avoid repeating mistakes. Nice to have: threat modelling, Semgrep or CodeQL rules, and open source contributions.