Software Engineer 3 - Hybrid Security & DevSecOps

CJ; Needham (MA); Hybrid; USD 89,000 - 136,000; Full time

Benefits offered by this job

401K matching

Hybrid work arrangements

Paid holidays

Wellness programs

Job summary

CJ is expanding its security-focused EngExp team and seeks a hands-on Software Engineer 3 specializing in security. You will work across engineering teams to identify, validate, and remediate vulnerabilities in CJ's code and cloud infrastructure, bridging engineering with the Global Security Office and auditors.

You will read code and config, integrate SAST/DAST into CI/CD, and help define secure-by-design practices while collaborating with product teams to minimize risk and improve overall

Qualifications

• 3+ years of software or infrastructure engineering experience with hands-on security
• Bachelor's degree or equivalent experience
• Able to read code and infrastructure config, not just interpret scanner output
• Understands common vulnerability classes and how to reason about exploitability and impact

Responsibilities

• Analyze infrastructure and codebases to produce evidence-backed answers about risk and impact
• Operate the vulnerability queue end to end: intake, prioritization, tracking, and validation of fixes
• Partner with engineers to articulate the actual threat behind findings
• Remediate findings directly when context allows and drive remediation
• Integrate security checks into CI/CD pipelines so issues are caught early
• Contribute to security standards and best practices across teams
• Assist in verifying AI-proposed fixes and risk assessments against actual code and runtime context

Skills

Security engineering

AWS

Kubernetes

Code reading

CI/CD

Education

Bachelor's degree or equivalent experience

Tools

Veracode

Wiz

Jira

Terraform

GitLab CI/CD

Job description

CJ is expanding its security-focused EngExp team and seeks a hands-on Software Engineer 3 specializing in security. You will work across engineering teams to identify, validate, and remediate vulnerabilities in CJ's code and cloud infrastructure, bridging engineering with the Global Security Office and auditors.

You will read code and config, integrate SAST/DAST into CI/CD, and help define secure-by-design practices while collaborating with product teams to minimize risk and improve overall