Job title: OpenSource Software Compliance Coordinator Transport is the core of modern society Imagine using your expertise to shape sustainable transport and infrastructure solutions for the future. If you seek to make a difference on a global scale working with the nextgen technologies and the sharpest collaborative teams then we could be a perfect match Role Description We are looking for a Professional Open Source Compliance Coordinator to join our Open Source Compliance Team within AppSec Platform Security Engineering. We are looking for someone who has a real interest and passion for Open Source Software Compliance and has a good technical background in application security especially Software Composition Analysis.
Your ability to learn new things to inspire others around you and your excellent communication skills may be just what we are looking for. This position is based in Bangalore India and follows a hybrid working model The expectation is to work from the office at least 3 days per week. You will Work with the delivery teams on results of Software Composition Analysis scans Provide auditors expertise and knowhow to Application delivery teams that use Open Source software in 2000 Applications Drive all OpenSource Compliance activities Collaborate with OpenSource Software Program Lead to solidify OpenSource Software Compliance Coordinate source code scans Contribute to development and implementation of compliance training and education materials Drive improvements in DevSecOps Transformations in relation to opensource compliance Use tools like Sonatype lifecycle to identify the OSS used to develop a software product as well as identifying opensource licenses Support teams out in the organization in how to analyse assess and respond to various internet threats in the opensource domain Who are you
Your experience
You have at least 4 years of experience with OpenSource software compliance
You are a solid communicator that is comfortable working both close to development teams as well as report and inform upper management on the status of open source compliance and vulnerability
You already
Have the ability to read and understand open source and commercial license terms and conditions
Have the ability to derive an understanding of license obligations
High level understanding of Risk acceptance and workflow in case of noncompliant licenses
Posses knowledge in understanding working flow for any of the popular programming languagesand scripting languages to understand and identify plagiarism of code or logic
Should have working knowledge of using any of the SCA tools Blackduck Sonatype Lifecycle MendIO Revenera codeinsight FOSSID
Should possess understanding of SCA package scanning and snippet scanning Should be able to explain and train teams on different categories of opensource licenses Should be able to identify origin opensource of codepackage Working knowledge of SBOM generation and review of data within it Clear written communication and oration skills A desire to scale security through education and compliance It is an advantage to have Solid software engineering experience in one or more general purpose languages and strong experience in IT Architecture Experience with CICD pipelines As a good understanding of application security awareness of OWASP Top 10 vulnerabilities and OWASP ASVS requirements Experience with security maturity models frameworks like OWASP SAMM or BSIMM Experience analyzing and improving products and software security at scale Experience in implementing application security testing processes tools Aware of Cyber Resilience Act CRA activities in EU or similar regulations across the world Whats in it for you Application security is an area of growing importance While we cant offer you an effortless job we can offer you a chance to be part of an exciting growing and evolving domain We are ready to help you develop and gain experience in areas you need to be a successful OpenSource Compliance Coordinator Our team is fun to work with diverse and we are all passionate about developing supporting and helping others in many aspects of software development We value your data privacy and therefore do not accept applications via mail Candidate needs to travel to client office C V Raman Nagar Bagmane for 2 to 3 days or all days wherever applicable
<
Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.