The Avaloq Security team is an international team of senior and expert software engineers. The team develops and maintains central application security frameworks, platforms, and tools across company-wide technology stacks and consults business and technology teams on best-practice implementations for context-specific security requirements.
The team operates group-wide application security assessments, monitors and manages security vulnerabilities, and supports business teams in defining and implementing effective risk mitigation measures.
As a Senior Software Engineer in the Security Assurance team, you will play a key role in developing and maintaining the automation, tooling, and CI/CD capabilities that embed security into the software development and release lifecycle. You will work across software engineering, DevOps, cloud, application security, and vulnerability management to build scalable solutions that enable development teams to deliver secure and high-quality software.
Your key tasks
- Design, implement, and maintain internal CI/CD pipelines and automation tooling supporting vulnerability management, security assurance, reporting, and efficient software development workflows.
- Develop and maintain security integrations across the software delivery lifecycle, including source-code, repository, dependency, and container security scanning.
- Develop and maintain backend services and APIs supporting security scanning, vulnerability analysis, event processing, reporting, and integration with internal platforms.
- Monitor and maintain the daily automated build and security validation processes, analyse security warnings and findings, and provide guidance or implement fixes as required.
- Evaluate and validate detected vulnerabilities, assess exploitability and risk, investigate false positives, and support or develop appropriate remediation solutions.
- Maintain and enhance automated security analysis and vulnerability-processing workflows, including event-driven processing and integration with issue-management systems such as Jira.
- Develop and maintain security reporting and dashboards that provide actionable insights into vulnerabilities, remediation status, security risks, and compliance.
- Work with containerized applications and cloud-native environments, including Kubernetes, OpenShift, and Oracle Cloud Infrastructure (OCI).
- Coordinate security-related actions across multiple teams to ensure the quality, security, and timely remediation of Avaloq products.
- Participate in internal technical discussions, sharing knowledge on secure software development, vulnerabilities, security implementation, and opportunities for continuous improvement.
#J-18808-Ljbffr…