Software Engineer, Supply Chain Security
Docker- Full Time
- Junior (1 to 2 years)
GitLab
Candidates should possess experience with software supply chain security concepts and tools, an understanding of the SLSA (Supply-chain Levels for Software Artifacts) framework and its application in CI/CD pipelines, and familiarity with software artifact provenance, attestation, and vulnerability management.
The Engineering Manager will lead a team focused on developing features for Software Supply Chain Security, primarily focused on CI job artifact security within the SLSA compliance framework, collaborate with Product Managers to define and prioritize the roadmap for Supply Chain Security features, stay current with industry standards and best practices in software supply chain security, partner with Security team members to ensure features meet the highest security standards, educate and advocate for supply chain security best practices across GitLab, and represent GitLab in industry forums related to software supply chain security when appropriate.
Unified DevOps platform for software development
GitLab offers a DevOps platform that simplifies the software development process by providing a single application for collaboration, visibility, and speed. The platform integrates various tools needed for software development, which helps teams manage their projects more efficiently without juggling multiple tools. This allows companies to concentrate on enhancing their products instead of spending too much time on builds. GitLab serves a wide range of clients, including large corporations from different industries, demonstrating its versatility. The company operates on a subscription-based model, where clients pay for access to the platform, which includes features for continuous integration and deployment. GitLab also provides free trials and regularly updates its platform to deliver ongoing value to its users. By customizing its offerings and partnering with other technology providers, GitLab aims to enhance its ecosystem and drive revenue.