Senior DevSecOps Engineer: SBOM & Supply Chain

Zerto; San Juan (PR); Hybrid; USD 120,000 - 160,000; Full time

Benefits offered by this job

Relocation support

Health benefits

Job summary

Hewlett Packard Enterprise seeks a DevSecOps SCA Engineer to design, implement, and maintain software security across CI/CD pipelines, with SBOM generation and supply chain controls. Hybrid work model with an office presence required, relocation support offered for eligible candidates.

The role emphasizes collaboration with security, engineering, and compliance teams to ensure vulnerability triage, attestations, and documentation are up to date while delivering robust, scalable software

Qualifications

• Bachelor’s or Master’s degree in Computer Science, Information Systems, or equivalent.
• Typically 5–8 years of experience in software development, security engineering, DevSecOps, or platform engineering roles with a focus on security and supply chain integrity.

Responsibilities

• Lead design, development, and maintenance of software solutions for system software, utilities, and security tools.
• Develop and operate automated SBOM generation pipelines during build and release processes.
• Integrate SCA, dependency tracking, artifact signing, and supply chain security controls into CI/CD pipelines.
• Define SBOM quality, format compliance (e.g., SPDX, CycloneDX), and attestations.
• Collaborate with engineering, security, and compliance teams on vulnerability triage and audit readiness.
• Analyze system designs and determine coding, integration, and testing activities.
• Write and execute comprehensive test plans, protocols, and documentation; debug and resolve issues related to code, integration, and security controls.
• Lead cross-functional project teams and mentoring to deliver reliable, cost-effective solutions.
• Develop dashboards and reports to monitor supply chain posture and SLA adherence.

Skills

SBOM standards knowledge

Cloud-native architectures

CI/CD expertise

Scripting / automation

Strong communication

Education

Bachelor’s or Master’s degree in Computer Science/Information Systems

Tools

Trivy

BlackDuck

Grafana

Datadog

Python

Go

Bash

PowerShell

Job description

Hewlett Packard Enterprise seeks a DevSecOps SCA Engineer to design, implement, and maintain software security across CI/CD pipelines, with SBOM generation and supply chain controls. Hybrid work model with an office presence required, relocation support offered for eligible candidates.

The role emphasizes collaboration with security, engineering, and compliance teams to ensure vulnerability triage, attestations, and documentation are up to date while delivering robust, scalable software