DevSecOps SCA Engineer

About the role

Hewlett Packard Enterprise is hiring a DevSecOps SCA Engineer in San Juan, Puerto Rico. The role is hybrid, with about two days per week spent in an HPE office. It covers software development, security and supply-chain protection, including SBOM and SCA, and calls for advanced technical expertise, project leadership and mentoring.

Key responsibilities

• Lead the design, development and maintenance of software solutions, including updates and programming changes for system software, utilities and security tools.
• Develop and run automated pipelines for SBOM generation during build and release for containerized and non-containerized applications.
• Integrate SCA, dependency tracking, artifact signing and supply-chain security controls into CI/CD pipelines.
• Define and enforce SBOM quality and format policies (SPDX, CycloneDX) and attestations.
• Work with engineering, security and compliance teams on vulnerability triage, exception handling and audit readiness.
• Analyze system designs and define coding, integration and testing activities, then write and run test plans and documentation while debugging issues.
• Lead cross-functional project teams, including outsourced partners, and mentor less experienced staff.
• Build dashboards and reports on supply-chain posture and SLA adherence, and represent the team in complex projects.

Required profile

• Bachelor's or Master's degree in Computer Science, Information Systems or equivalent.
• Typically 5-8 years of experience in software development, security engineering, DevSecOps or platform engineering, focused on security and supply-chain integrity.
• Relocation support is provided for eligible candidates.

Required skills

• SBOM standards such as SPDX and CycloneDX.
• Supply-chain security concepts including SLSA, provenance, artifact integrity and signing.
• SCA tooling such as Trivy, BlackDuck or similar; monitoring tools such as Grafana, Datadog or similar.
• Familiarity with cloud-native architectures and CI/CD ecosystems.
• Scripting and automation in Python, Go, Bash or PowerShell.