Specialist - Architecture
LTM · Bengaluru · onsite · Posted 28d ago
Not disclosed4–6 yrsfulltimeSourced from
About a minute. You'll make an account on the way through.
About this role
Role Description
Job title: OpenSource Software Compliance Coordinator
Transport is the core of modern society Imagine using your expertise to shape sustainable transport and infrastructure solutions for the future. If you seek to make a difference on a global scale working with the nextgen technologies and the sharpest collaborative teams then we could be a perfect match
Role Description
We are looking for a Professional Open Source Compliance Coordinator to join our Open Source Compliance Team within AppSec Platform Security Engineering. We are looking for someone who has a real interest and passion for Open Source Software Compliance and has a good technical background in application security especially Software Composition Analysis. Your ability to learn new things to inspire others around you and your excellent communication skills may be just what we are looking for. This position is based in Bangalore India and follows a hybrid working model The expectation is to work from the office at least 3 days per week.
You will
Work with the delivery teams on results of Software Composition Analysis scans
Provide auditors expertise and knowhow to Application delivery teams that use Open Source software in 2000 Applications
Drive all OpenSource Compliance activities
Collaborate with OpenSource Software Program Lead to solidify OpenSource Software Compliance
Coordinate source code scans
Contribute to development and implementation of compliance training and education materials
Drive improvements in DevSecOps Transformations in relation to opensource compliance
Use tools like Sonatype lifecycle to identify the OSS used to develop a software product as well as identifying opensource licenses
Support teams out in the organization in how to analyse assess and respond to various internet threats in the opensource domain
Who Are You
Your experience
You have at least 4 years of experience with OpenSource software compliance
You are a strong communicator that is comfortable working both close to development teams as well as report and inform upper management on the status of open source compliance and vulnerability
You already
Have the ability to read and understand open source and commercial license terms and conditions
Have the ability to derive an understanding of license obligations
High level understanding of Risk acceptance and workflow in case of noncompliant licenses
Posses knowledge in understanding working flow for any of the popular programming languagesand scripting languages to understand and identify plagiarism of code or logic
Should have working knowledge of using any of the SCA tools Blackduck Sonatype Lifecycle MendIO Revenera codeinsight FOSSID
Should possess understanding of SCA package scanning and snippet scanning
Should be able to explain and train teams on different categories of opensource licenses
Should be able to identify origin opensource of codepackage
Working knowledge of SBOM generation and review of data within it
Clear written communication and oration skills
A desire to scale security through education and compliance
It is an advantage to have
Solid software engineering experience in one or more general purpose languages and strong experience in IT Architecture
Experience with CICD pipelines
As a good understanding of application security awareness of OWASP Top 10 vulnerabilities and OWASP ASVS requirements
Experience with security maturity models frameworks like OWASP SAMM or BSIMM
Experience analyzing and improving products and software security at scale
Experience in implementing application security testing processes tools
Aware of Cyber Resilience Act CRA activities in EU or similar regulations across the world
Whats In It For You
Application security is an area of growing importance While we cant offer you an effortless job we can offer you a chance to be part of an exciting growing and evolving domain
We are ready to help you develop and gain experience in areas you need to be a successful OpenSource Compliance Coordinator
Our team is fun to work with diverse and we are all passionate about developing supporting and helping others in many aspects of software development
We value your data privacy and therefore do not accept applications via mail
Candidate needs to travel to client office C V Raman Nagar Bagmane for 2 to 3 days or all days wherever applicable
Job title: OpenSource Software Compliance Coordinator
Transport is the core of modern society Imagine using your expertise to shape sustainable transport and infrastructure solutions for the future. If you seek to make a difference on a global scale working with the nextgen technologies and the sharpest collaborative teams then we could be a perfect match
Role Description
We are looking for a Professional Open Source Compliance Coordinator to join our Open Source Compliance Team within AppSec Platform Security Engineering. We are looking for someone who has a real interest and passion for Open Source Software Compliance and has a good technical background in application security especially Software Composition Analysis. Your ability to learn new things to inspire others around you and your excellent communication skills may be just what we are looking for. This position is based in Bangalore India and follows a hybrid working model The expectation is to work from the office at least 3 days per week.
You will
Work with the delivery teams on results of Software Composition Analysis scans
Provide auditors expertise and knowhow to Application delivery teams that use Open Source software in 2000 Applications
Drive all OpenSource Compliance activities
Collaborate with OpenSource Software Program Lead to solidify OpenSource Software Compliance
Coordinate source code scans
Contribute to development and implementation of compliance training and education materials
Drive improvements in DevSecOps Transformations in relation to opensource compliance
Use tools like Sonatype lifecycle to identify the OSS used to develop a software product as well as identifying opensource licenses
Support teams out in the organization in how to analyse assess and respond to various internet threats in the opensource domain
Who Are You
Your experience
You have at least 4 years of experience with OpenSource software compliance
You are a strong communicator that is comfortable working both close to development teams as well as report and inform upper management on the status of open source compliance and vulnerability
You already
Have the ability to read and understand open source and commercial license terms and conditions
Have the ability to derive an understanding of license obligations
High level understanding of Risk acceptance and workflow in case of noncompliant licenses
Posses knowledge in understanding working flow for any of the popular programming languagesand scripting languages to understand and identify plagiarism of code or logic
Should have working knowledge of using any of the SCA tools Blackduck Sonatype Lifecycle MendIO Revenera codeinsight FOSSID
Should possess understanding of SCA package scanning and snippet scanning
Should be able to explain and train teams on different categories of opensource licenses
Should be able to identify origin opensource of codepackage
Working knowledge of SBOM generation and review of data within it
Clear written communication and oration skills
A desire to scale security through education and compliance
It is an advantage to have
Solid software engineering experience in one or more general purpose languages and strong experience in IT Architecture
Experience with CICD pipelines
As a good understanding of application security awareness of OWASP Top 10 vulnerabilities and OWASP ASVS requirements
Experience with security maturity models frameworks like OWASP SAMM or BSIMM
Experience analyzing and improving products and software security at scale
Experience in implementing application security testing processes tools
Aware of Cyber Resilience Act CRA activities in EU or similar regulations across the world
Whats In It For You
Application security is an area of growing importance While we cant offer you an effortless job we can offer you a chance to be part of an exciting growing and evolving domain
We are ready to help you develop and gain experience in areas you need to be a successful OpenSource Compliance Coordinator
Our team is fun to work with diverse and we are all passionate about developing supporting and helping others in many aspects of software development
We value your data privacy and therefore do not accept applications via mail
Candidate needs to travel to client office C V Raman Nagar Bagmane for 2 to 3 days or all days wherever applicable
Sourced from foundit
Skills
OWASP ASVS requirementsRevenera CodeInsightSBOM generation and reviewSCA package scanningSnippet scanningCI/CD PipelinesIT Architecturescripting languagesSonatype LifecycleSoftware Composition AnalysisOWASP Top 10 vulnerabilitiesBlack DuckApplication SecurityOWASP SAMMFossIDMend.ioBSIMM