Software Supply Chain

Software Supply Chain Cybersecurity Jobs

2 jobs found

Today

Senior Security Engineer - Container & Cloud Security

Ecco Select New York, NY

New York, NY

Today

$65 - $65/hr Contract Cloud Native Security Cloud Native Workload Protection Cloud Platforms

Apply Now

Job Description

Sr. Security Engineer on a policy-as-code team focused on automating container and cloud security governance across Azure and GCP with Wiz.

Responsibilities

Design, implement, and maintain cloud-native container security controls for Kubernetes platforms including AKS, GKE, and EKS.
Develop, tune, and maintain container threat detection rules to identify malicious activity, anomalous behavior, and indicators of compromise.
Monitor runtime security events, investigate alerts, and support triage and incident response for container and Kubernetes workloads.
Deploy and optimize Wiz Defend/CWPP capabilities, including runtime sensors, workload protection, and attack path analysis.
Create and automate security guardrails using Infrastructure as Code (Terraform, Helm) and GitOps, including admission controller policies and preventative controls.
Strengthen container software supply chain with image scanning, SBOM validation, image signing, and registry security.
Identify, prioritize, and remediate container vulnerabilities and misconfigurations using risk-based exposure analysis.
Develop and maintain Compliance-as-Code policies aligned to CIS, NIST, and STIG security benchmarks.
Route Wiz findings and threat intelligence into ServiceNow and enterprise vulnerability management workflows.
Partner with Security Operations, Cloud Engineering, DevSecOps, and application teams to improve detection coverage and cloud security posture.
Conduct threat hunting and proactive analysis to improve detection logic and enhance runtime protection capabilities.
Support post-incident reviews with root cause analysis, corrective action recommendations, and continuous improvement of detection and response.

Requirements

Strong cloud security knowledge across AI/ML platforms, model pipelines, data layers, IAM, networking, and logging.
Hands-on Wiz CNAPP expertise (CSPM, CIEM, DSPM, CWPP), including applying it to AI workloads, model hosting, and data pipelines.
Experience designing preventive and detective security controls across model, data, and platform layers.
Compliance-as-Code fluency, including mapping Wiz findings to STIGs, native cloud policies, CI/CD, and governance workflows.
Ability to interpret Wiz risk graphs and communicate risk-based exposure analysis for model misuse, data leakage, privilege escalation, and blast radius.
Kubernetes experience across AKS, GKE, and EKS.
Working knowledge of Terraform, Helm, and GitOps-based pipelines.

Technologies

Wiz, Wiz Defend, CWPP, CSPM, CIEM, DSPM
Kubernetes, AKS, GKE, EKS
Terraform, Helm, GitOps, Azure, GCP
CIS, NIST, STIG
ServiceNow
Container image scanning, SBOM, image signing, registry security
Admission controller, Infrastructure as Code, CI/CD

Benefits

401(k)
401(k) matching
Dental insurance
Health insurance
Paid time off
Retirement plan
Vision insurance

Nice to have

Direct, hands-on Wiz platform experience is a significant plus.
Container image/repository scanning experience.
Deeper Terraform or IaC pipeline background.
Open to strong, trainable candidates with somewhat less hands-on experience, as long as foundational cloud and container security skills are solid.

Contract details

Duration: 6 months initial; strong intent to convert to full-time
Engagement length: engagements on this team have extended up to 4 years
Schedule: full-time, approximately 3 days/week onsite
Pay: USD 65 per hour

Location & work authorization

Work location: Hybrid remote in New York, NY 10001
Primary location: New York, NY (hybrid)
Secondary location: NY tri-state area (NJ, Philadelphia, NYC) considered
Strong preference: Toronto, ON
Work authorization: GC or USC only

Interview process

Panel interview with the Hiring Manager and two technical leads

View full job page →

1mo ago

Application Security Engineer, AI & Automation

Skill Remote 🌍 Remote

Remote

1mo ago Closed

$90 - $92/hr Contract Ai Governance Ai Security Application Security

This position is no longer accepting applications (closed Aug 22, 2026).

Job Description

Skill is seeking a remote contract Senior Application Security Engineer focused on AI-driven automation for SCA/SAST/DAST triage and software supply chain security. This role centers on building, testing, and refining AI-enabled security tooling that leverages frontier LLMs to identify vulnerabilities, reason about code, accelerate triage, and automate remediation, all while aligning secure developer workflows across a distributed organization. The position offers a remote schedule with an hourly rate of USD 90–92 and requires a minimum of three years of hands-on experience in the field.

Responsibilities

AI & Automation Engineering: Develop, test, and optimize application security tooling that uses frontier LLMs for vulnerability identification, code reasoning, triage acceleration, and automated remediation.
Modern Triage & Incident Response: Provide unified triage coverage across SCA, SAST, and DAST findings. Lead rapid assessment and routing of threat intelligence escalations and critical patch events (PatchNow).
Software Supply Chain Defense: Strengthen open-source dependency selection, package intake, and SBOM visibility. Build guardrails to detect malicious packages and enforce security policies across developer pipelines.
Secure Developer Workflows: Assess and secure developer environments, including IDEs, plugins/extensions, package managers, and AI coding assistants against malicious code and unsafe configurations.
AI Governance Support: Assist with technical proofs-of-value, data handling reviews, and model output evaluations required to safely onboard new AI capabilities across the enterprise.

Requirements

Experience: 3+ years of hands-on Application Security experience with deep familiarity across the vulnerability lifecycle (SCA, SAST, DAST, and manual verification).
Automation Mindset: Strong engineering fundamentals with scripting languages (Python, Go), APIs, CI/CD pipelines (GitHub Actions, GitLab CI), and developer tool integrations.
AI Curiosity: Practical familiarity or hands-on experimentation with frontier models (LLMs), AI coding assistants (Copilot), prompt engineering, or AI orchestration frameworks.
Supply Chain Knowledge: Experience securing software supply chains, package managers, and third-party dependencies against modern attack vectors.
Communication: Ability to translate complex vulnerabilities into clear, actionable remediation guidance for software engineering teams.

Technologies

Python
Go
GitHub Actions
GitLab CI
Copilot

Bonus Points

Contributions to open-source security tools or AI/LLM security projects (eg, OWASP Top 10 for LLMs).
Experience building custom integrations or LLM agents to automate security analyst workflows.

View full job page →

Software Supply Chain Cybersecurity Jobs

Senior Security Engineer - Container & Cloud Security

Application Security Engineer, AI & Automation

Get Software Supply Chain Cybersecurity Jobs alerts