SBOM engineer

Job Description : Are you passionate about delivering excellent developer experiences with a shift-left approach? Adobe's application security team owns the charter of ensuring that security is treated as a first-class citizen during product development. Join our AppSec team which partners with Adobe developers to ensure our products are built as secure as possible. We identify security risks and enable development teams to fix them before deployment to production.

Must-Have Skills (Non-Negotiable)

• Python development is the #1 requirement.
• SBOM experience - direct or with common SBOM tools:

• Grype
• Syft
• Anchore products
• SPDX
• CycloneDX
• Without Python + SBOM experience, they won't even phone screen.

Nice-to-Haves

• Any User Interface development experience (they offer user-facing services).
• API development experience (creating, consuming, documenting).
• AWS expertise or experience..
• Preference for West Coast time zone, but not mandatory.
• Slight preference for Bay Area candidates for occasional in-office collaboration - but not required.

What you'll Do

• Help us handle software dependencies at Adobe scale by building services that automatically generate Software Bill of Materials (SBOMs)
• Address critical regulatory reporting and compliance needs for all of our customers and future customers
• Work in a multi-functional, security focused team to integrate security analysis tools into Adobe's security capabilities
• Help build and deploy scalable microservices that support all of Adobe's software development teams and products
• Work in an Agile environment with a team that partners and cares deeply about our internal Adobe developer's customer experience

What you need to succeed

• Bachelor's Degree or 5+ years of equivalent experience in the Computer Science, Engineering or Application Security field
• 3+ years of a proven track record developing software
• Experience with the following tech stack: Python, Kubernetes, AWS S3, SQS, RDS, SQL Databases (Postgresql a plus)
• Familiarity with SBOMs and Software Composition Analysis (SCA) technologies (Snyk Open Source, Syft or similar technologies)
• Be knowledgeable about Software Package Data Exchange (SPDX) or CycloneDX reporting formats
• Have an appreciation for developers to help enable development vs. hindering it
• Be ambitious with excellent interpersonal and communication skills