Specialist - Architecture

Specialist - Architecture

Job title: OpenSource Software Compliance Coordinator

Transport is the core of modern society Imagine using your expertise to shape sustainable transport and infrastructure solutions for the future. If you seek to make a difference on a global scale working with the nextgen technologies and the sharpest collaborative teams then we could be a perfect match

Role Description

We are looking for a Professional Open Source Compliance Coordinator to join our Open Source Compliance Team within AppSec Platform Security Engineering. We are looking for someone who has a real interest and passion for Open Source Software Compliance and has a good technical background in application security especially Software Composition Analysis. Your ability to learn new things to inspire others around you and your excellent communication skills may be just what we are looking for. This position is based in Bangalore India and follows a hybrid working model The expectation is to work from the office at least 3 days per week.

You will

Work with the delivery teams on results of Software Composition Analysis scans

Provide auditors expertise and knowhow to Application delivery teams that use Open Source software in 2000 Applications

Drive all OpenSource Compliance activities

Collaborate with OpenSource Software Program Lead to solidify OpenSource Software Compliance

Coordinate source code scans

Contribute to development and implementation of compliance training and education materials

Drive improvements in DevSecOps Transformations in relation to opensource compliance

Use tools like Sonatype lifecycle to identify the OSS used to develop a software product as well as identifying opensource licenses

Support teams out in the organization in how to analyse assess and respond to various internet threats in the opensource domain

Who are you

Your experience

You have at least 4 years of experience with OpenSource software compliance

You are a strong communicator that is comfortable working both close to development teams as well as report and inform upper management on the status of open source compliance and vulnerability

You already

Have the ability to read and understand open source and commercial license terms and conditions

Have the ability to derive an understanding of license obligations

High level understanding of Risk acceptance and workflow in case of noncompliant licenses

Posses knowledge in understanding working flow for any of the popular programming languagesand scripting languages to understand and identify plagiarism of code or logic

Should have working knowledge of using any of the SCA tools Blackduck Sonatype Lifecycle MendIO Revenera codeinsight FOSSID

Should possess understanding of SCA package scanning and snippet scanning

Should be able to explain and train teams on different categories of opensource licenses

Should be able to identify origin opensource of codepackage

Working knowledge of SBOM generation and review of data within it

Clear written communication and oration skills

A desire to scale security through education and compliance

It is an advantage to have

Solid software engineering experience in one or more general purpose languages and strong experience in IT Architecture

Experience with CICD pipelines

As a good understanding of application security awareness of OWASP Top 10 vulnerabilities and OWASP ASVS requirements

Experience with security maturity models frameworks like OWASP SAMM or BSIMM

Experience analyzing and improving products and software security at scale

Experience in implementing application security testing processes tools

Aware of Cyber Resilience Act CRA activities in EU or similar regulations across the world

Whats in it for you

Application security is an area of growing importance While we cant offer you an effortless job we can offer you a chance to be part of an exciting growing and evolving domain

We are ready to help you develop and gain experience in areas you need to be a successful OpenSource Compliance Coordinator

Our team is fun to work with diverse and we are all passionate about developing supporting and helping others in many aspects of software development

We value your data privacy and therefore do not accept applications via mail

Candidate needs to travel to client office C V Raman Nagar Bagmane for 2 to 3 days or all days wherever applicable