Senior Backend Engineer, SSCS – Supply Chain

🕒 il y a 1 mois

Postuler Maintenant

Trouver des Emplois à Distance Similaires

Recevoir des emails pour des emplois à distance

📊 Vérifiez votre score de CV pour ce poste

Améliorez vos chances d'obtenir un entretien en vérifiant votre score de CV avant de postuler.

Télécharger le CV

GitLab

Site WebLinkedInTous les Emplois

1001 - 5000 employés

Fondée en 2014

🤖 Intelligence artificielle

🏢 Entreprise

☁️ SaaS

💰 Secondary Market en 2020-11

Artificial Intelligence • Enterprise • SaaS

GitLab est une plateforme DevOps complète, proposée sous la forme d’une application unique, qui change en profondeur la manière dont les équipes Développement, Sécurité et Ops collaborent et construisent des logiciels. De l’idée à la production, GitLab aide les équipes à réduire le temps de cycle de plusieurs semaines à quelques minutes, à diminuer les coûts de développement et le time to market, tout en augmentant la productivité des développeurs.

Description

• Design and implement backend features across the Add-On's software supply chain security surface, including policy enforcement, artifact signing and verification, provenance attestation APIs, and malicious package detection integrations • Build and improve the package policy evaluation engine, including rule compilation, request matching, enforcement decisions, and performance-sensitive execution paths tied to GitLab's Dependency Firewall infrastructure • Develop artifact signing and verification workflows, including Sigstore and Cosign integrations • Create and evolve the configuration interfaces that enterprise security teams use, including backend APIs and the GraphQL surface • Integrate Add-On capabilities with GitLab's existing security policy framework • Collaborate with adjacent teams as malicious package intelligence is incorporated into the Add-On offering • Write and maintain comprehensive RSpec and integration test coverage • Review merge requests with a security-first mindset

🎯 Exigences

• Proven backend engineering experience, including production Ruby on Rails expertise • Working knowledge of Go or a clear willingness to ramp up quickly in it • Solid API design skills, including experience with REST, GraphQL, and defining clear internal service boundaries • Solid PostgreSQL fundamentals, including schema design, query optimization, and indexing strategies • Experience with Redis for caching and distributed coordination patterns • A security-aware engineering mindset, with sound judgment around trust boundaries, input validation, and failure modes • Familiarity with software supply chain security concepts such as Supply-chain Levels for Software Artifacts (SLSA), software bill of materials (SBOM), artifact signing, or related security scanning approaches • Interest in complex policy, registry, or platform problems, including areas such as rules engines, package ecosystems, cryptographic signing, or DevSecOps product development.

🏖️ Avantages

• Benefits to support your health, finances, and well-being • Flexible Paid Time Off • Team Member Resource Groups • Equity Compensation & Employee Stock Purchase Plan • Growth and Development Fund • Parental leave • Home office support