The Sonatype journey started 15 years ago, just as the concept of “open source” software development was gaining steam. From our humble beginning as core contributors to Apache Maven, to supporting the world’s largest repository of open source components (Central), to distributing the world's most popular repository manager (Nexus), we’ve played a meaningful role in helping the world embrace the power of open innovation.

Over time, we witnessed the staggering volume and variety of open source libraries that began flowing into every development environment in the world. We understood that when open source components are properly managed, they provide a tremendous energy for accelerating innovation.  Conversely, when unmanaged, open source "gone wild" can lead directly to security vulnerabilities, licensing risks, enormous rework, and waste.

Our vision today is simple.

We are laser focused on helping organizations continuously harness all of the good that open source has to offer, without any of the risk. In order to do this, we have invested in knowing more about the quality of open source than anyone else in the world. This investment takes the form of machine learning, artificial intelligence, and human expertise, which in aggregate produces highly curated intelligence that is infused into every Nexus product. Organizations equipped with Nexus products make better decisions, innovate faster at scale, and rest comfortably knowing that their applications always consist of the highest quality open source components.

Sonatype

DevOps & Production Engineering

• Work with a team of engineers to improve software development
• Work with a customer to help them create better and safer software
• Work with a customer to improve service delivery

DevOps Engineer - Remote

Security Engineer

• Review, isolate, analyze, and reverse engineer vulnerabilities in open-source software
• Document attack capabilities
• Provide detection and remediation guidance
• Aid in ideas and prototypes for new tooling
• Work with technology and business team members to define and refine requirements in an agile development environment

Remote Job Openings at Sonatype

Sonatype

DevOps Engineer - Remote

Sonatype

Open Source Vulnerability Security Researcher - 100% Remote

Sonatype