DevSecOps SCA Engineer

About the role

HPE is seeking a DevSecOps SCA Engineer to lead the design, development, and maintenance of software solutions that enhance supply chain security. This hybrid position requires working on average two days per week from an HPE office in San Juan.

Key responsibilities

• Design, develop, and maintain system software, utilities, and security tools, including automated SBOM generation pipelines.
• Integrate Software Composition Analysis, dependency tracking, artifact signing, and supply chain security controls into CI/CD pipelines.
• Define and enforce SBOM quality policies (e.g., SPDX, CycloneDX) and manage vulnerability triage and audit readiness.
• Lead cross‑functional project teams, including internal and outsourced partners, to deliver reliable, cost‑effective solutions.
• Develop dashboards and reports to monitor supply‑chain posture and provide executive insights.

Required profile

• Bachelor’s or Master’s degree in Computer Science, Information Systems, or related field.
• 5‑8 years of experience in software development, security engineering, DevSecOps, or platform engineering with a focus on supply‑chain integrity.
• Strong analytical, problem‑solving, and testing methodology skills.

Required skills

• Hands‑on experience with SBOM standards such as SPDX and CycloneDX.
• Knowledge of supply‑chain security concepts (SLSA, provenance, artifact integrity, signing).
• Proficiency with SCA tools like Trivy or BlackDuck.
• Experience with monitoring tools such as Grafana or Datadog.
• Scripting/automation in Python, Go, Bash or PowerShell.
• Familiarity with cloud‑native architectures and CI/CD ecosystems.

What we offer

• Comprehensive health and wellbeing benefits for you and your family.
• Personal and professional development programs to advance your career.
• Inclusive culture that values diverse backgrounds and flexible work arrangements.