Security Engineer – Software Security Enablement

Overview

In this role you help ensure Bloomberg software is built securely by delivering automated security capabilities across the development lifecycle. You partner with engineering teams to provide remediation guidance and improve security testing for actionable results. You will prototype tools, integrate security testing into pipelines, and develop custom capabilities to scale testing across engineering teams. You stay current with security trends and leverage AI-enabled workflows to advance secure coding and vulnerability management. This position offers impact across a fast-paced, multi-stack environment with a clear security mission.

Responsibilities

• Develop automated security solutions that integrate into development pipelines
• Maintain and enhance existing security automation processes
• Perform ad-hoc vulnerability discovery including code review and static analysis for key teams
• Research technical details of core tech stacks to develop or enhance custom code analysis queries
• Communicate vulnerability landscape and drive mitigations with stakeholders
• Explore and implement AI-assisted security workflows and LLM-based assessments
• Build or adopt security capabilities to address scale, including SCA and secret searching
• Develop runbooks and support security automation initiatives across multiple stacks

Key requirements

• Strong core engineering background with 3+ years of software development
• Proficiency in at least one of: C/C++, Python, JavaScript/TypeScript
• Knowledge of DevOps and pipelines tools (GitHub, Jenkins)
• Experience with build systems and tooling (cmake, npm, maven, gradle)
• Understanding of OWASP Top 10 and language-specific vulnerabilities
• Experience with LLMs or AI-assisted tooling in technical workflows
• Ability to align technical knowledge with information security program goals
• Excellent written and verbal communication skills

• excellent communication
• collaboration across teams
• critical thinking
• SAST, DAST, SCA
• Secret searching
• LLM-based assessments

…