Supply Chain Security Engineer

Implement and improve the vulnerability management lifecycle, ensuring our entire tech stack is free from known vulnerabilities/CVEs.

Continuously scan, monitor, and patch OSS dependencies to mitigate supply chain risks and enforce best practices for dependency management by integrating artifact scanning processes…

Help build and execute our software supply chain security strategy to expand upon Glean’s ability to deploy secure-by-default open-source artifacts, etc., across the enterprise.

Improve the supply chain vulnerability scoring mechanism to take into account the environmental/impact controls and the reachability factors.

BA/BS in Computer Science, Cybersecurity, or a related field (or equivalent industry experience).

Deep understanding of software security vulnerabilities, including CVEs, OWASP Top 10, and supply chain risks.

Deep understanding security design principles including but not limited to authentication, authorisation, RBAC, database security.

Strong understanding of software supply chain components and management.