Senior Software Engineer – DevX SCAnS (Developer Experience)

Our team is responsible for:
Providing SBOM tooling and helping integrate it into our supply chain
Working across ecosystems to adjust our tooling to produce the best quality results
Controlling and tracking the ingress of software components into the firm’s network
Solving the firm’s operational resiliency needs for software ingress and component analysis
We are looking for a Senior Software Engineer to drive these projects in the SCAnS team.

What's in it for you?

As an engineer in this growing team, you will be at the heart of Bloomberg’s efforts to secure our software supply chain. This domain is extremely important for the firm’s security and operational resilience posture, and your work will be equally impactful and leveraged by all engineering teams.

With upcoming regulations around Operational Resilience such as DORA, Software Supply Chain security is a hot topic in the industry and a very dynamic space to be involved in. Our team leverages open-source software (e.g. Syft), and also influences the wider industry on standards for SBOMs and SSC. We also have home-grown solutions for specific problems (e.g. the domain of Ingress), providing a broad mix of technologies and approaches.

We will trust you to:
Collaborate across multiple teams to perform cross-cutting work
Work with users to understand their needs
Develop and deploy scalable solutions to meeting our supply chain needs
Identify risks with our supply chain end-to-end

You’ll need to have:
Experience in Python or Go
Knowledge of the software development lifecycle
A passion for improving the firm’s security posture
A drive to partner and collaborate with users and team members alike
We’d love to see:
Experience making upstream contributions
A history of making changes that involve multiple teams
Knowledge of software supply chains, SBOMs, and how they are used
An awareness of vulnerability, malware and licensing challenges in third party software