
501 - 1000 employees
Founded 2008
🔒 Cybersecurity
☁️ SaaS
💰 $80M Private Equity Round on 2018-09
Cybersecurity • Software • SaaS
Sonatype is a leader in software composition analysis (SCA) and software supply chain management. The company provides solutions to automate software supply chain security, build centralized components, control open source risks, and simplify software bill of materials (SBOM) compliance. Sonatype offers tools such as Nexus Repository, Repository Firewall, Lifecycle, and SBOM Manager, which help developers deliver quality code securely and manage vulnerability risks. Sonatype integrates with numerous tools and languages, supporting dev, security, and ops teams to ensure secure deployments. The company is recognized for its end-to-end software supply chain solutions that leverage artificial intelligence to predict and intercept malicious components, enhancing security across industries such as financial services and technology.
🔥 0 minutes ago
Improve your chances of getting an interview by checking your resume score before you apply.

501 - 1000 employees
Founded 2008
🔒 Cybersecurity
☁️ SaaS
💰 $80M Private Equity Round on 2018-09
Cybersecurity • Software • SaaS
Sonatype is a leader in software composition analysis (SCA) and software supply chain management. The company provides solutions to automate software supply chain security, build centralized components, control open source risks, and simplify software bill of materials (SBOM) compliance. Sonatype offers tools such as Nexus Repository, Repository Firewall, Lifecycle, and SBOM Manager, which help developers deliver quality code securely and manage vulnerability risks. Sonatype integrates with numerous tools and languages, supporting dev, security, and ops teams to ensure secure deployments. The company is recognized for its end-to-end software supply chain solutions that leverage artificial intelligence to predict and intercept malicious components, enhancing security across industries such as financial services and technology.
• Lead the design and delivery of enterprise-grade, agentic-first capabilities within Nexus Repository Manager • Set technical direction for a major product area • Orchestrate fleets of agents across parallel workstreams covering decomposition, orchestration, implementation, testing, and review • Own major initiatives from ambiguous problem statements through technical design, multi-team execution, rollout, and long-term operability • Define evaluations, harnesses, guardrails, and review rituals for code generated by agents • Establish internal agentic engineering playbooks, tooling, and rituals • Train and mentor Senior engineers • Own performance, reliability, and security requirements, including software supply chain threats • Partner with Product, Security Research, UX, and Support leaders to translate customer needs into technical plans • Conduct deep design reviews and raise engineering quality standards • Partner with Principal engineers on difficult technical decisions • Shape the Nexus technical roadmap and engineering hiring bar
• Multi-step, long-running agent workflows as a default software development method • Hands-on experience designing, running, and scaling multi-agent systems, including Claude Code, Codex, Cursor background agents, custom orchestrators, or LangGraph-style graphs • Experience with MCP tooling, shared context and memory, agent handoffs, and robust evaluation harnesses • Production experience shipping work using multi-agent systems • Experience defining evaluations, test harnesses, observability, and review workflows • Experience leading internal rollouts, publishing, open-sourcing, or otherwise advancing agentic engineering practices • Product engineering mindset, independently making product decisions and driving scope, trade-offs, and sequencing • 7+ years of professional software development experience • Track record of leading multi-quarter technical initiatives spanning multiple teams or services • Strong experience with Java, cloud platforms (AWS / Azure / GCP), and large-scale distributed systems • Experience with performance tuning, data-intensive services, and production operability at scale • Working knowledge of software supply chain security • Knowledge of SBOM formats (CycloneDX, SPDX), SCA, SLSA provenance, Sigstore/cosign signing, vulnerability analysis (OSV, NVD), and package ecosystem attack patterns
• Parental leave • Diversity and inclusion working groups • Flexible working practices • Paid Volunteer Time Off (VTO)
Apply Now🕒 August 7
Staff Software Engineer building scalable backend, frontend, and cloud-native systems for Abstra, a nearshore tech talent company serving U.S. businesses. Providing technical leadership, DevSecOps expertise, mentoring, and reliability improvements from Colombia.
AWS
Azure
Cloud
Docker
Google Cloud Platform
Java
JavaScript
Kotlin
Kubernetes
Microservices
React
TypeScript
Vue.js
🕒 July 30
Principal Software Engineer owning authentication and authorization for Sezzle’s interest-free installment payments platform. Leading Golang gateway architecture, secure migrations, and identity services.
AWS
Distributed Systems
Docker
Kubernetes
Microservices
MySQL
Postgres
RDBMS
SQL
Go
🕒 July 24
Staff Software Developer influencing architecture and standards using cutting-edge technology at a FinTech company. Collaborating on key features and improvements in a global team environment.
AWS
Cloud
Docker
Kubernetes
Microservices
SQL
.NET
🕒 July 21
Staff Full Stack Engineer leading design and delivery of complex platforms at applied AI engineering firm. Collaborating with teams to deliver measurable results, focusing on AI integration.
Angular
Cloud
JavaScript
Microservices
Next.js
Node.js
NoSQL
Python
React
TypeScript
🕒 July 3
Principal Full-Stack Engineer developing next-generation SaaS applications at Truelogic. Working with a dynamic team to mentor engineers and deliver high-quality software solutions.
Angular
AWS
Distributed Systems
ElasticSearch
Entity Framework
Postgres
Redis
RxJS
SQL
.NET