Principal Engineer
My client, a multi-national financial services company is looking for a Principal Software Engineer to work as part of a team within their Cybersecurity business unit. The role will focus to provide innovative tools, libraries, and solutions to support and verify the implementation of security controls across the company’s application development community (10k+ developers). As a member of this team, the successful candidate will help guide decisions, lead deployments, and build integrations into our existing systems.
This position is approximately 25% on-site, and is a 12 month daily-rate contract.
Responsibilities:
· Design, develop, test, deploy and maintain SAST, SCA and secret scanning tools into the CI/CD pipeline and developer workflow tools.
· Evaluate and leverage opensource or vendor technologies, to support the company’s development community in eliminating application security vulnerabilities from their applications.
· Continued focus on engineering excellence, including improving automation, test coverage, release velocity and production health.
· You are a creator and a doer who will help us tackle real-life problems and meet real consumer needs.
· You have strong communication skills and technical expertise to drive and participate in meaningful discussions. You are a collaborative team-player in an autonomous team, owning all aspects of delivery (coding, quality, DevSecOps). You build relationships with key business partners and quickly establish trust to ensure effective delivery.
· You clearly detail requirements and system designs in a way that can be understood by both technical and non-technical individuals.
· Partner with industry-leading vendors to continually improve their solutions by defining their roadmaps and product requirements, and testing their releases, prior to deploying.
Requirements:
· AWS certification preferred and have working experience with cloud environments.
· Experience providing technical leadership, mentoring & coaching to less experienced engineers.
· Hands on experience with automation & pipeline implementation (Testing, Continuous Integration / Continuous Delivery pipeline).
· Application security experience, including Pen Testing, Static Composition Analysis (SCA), Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), and Web Application Firewalls (WAF) would be considered a plus.
· You possess strong engineering skills and have experience deploying maintainable, scalable multi-tiered applications.
· Capability of designing and developing tools/applications using some of the following technologies: Unix and Shell scripting; Common programming languages such as core Java, Python, etc; Popular opensource frameworks/libraries (e.g. Spring, Springboot, Apache Commons, etc.); SOA and API frameworks such as SOAP and REST; Pipeline/Build tools including GIT, Maven, Jenkins, Jenkins Core, and AWS CFT/CDK; Front end languages/frameworks including JavaScript/Typescript, jQuery, Angular, NodeJS, Springboard and React a plus.
· Experience with test automation, including solid understanding of test tools.
· Security architecture mentality.
· Experience working in an agile environment (Scrum).
· Ability to communicate optimally to positively influence peers, business unit and technology decision makers.
· Strong analytical skills and ability to tackle issues and work through ambiguous situations by making timely decisions based on facts, knowledge, experience and judgement.
For more information, and an immediate call, please click on the apply button below!
#LI-NC1
