Senior DevSecOps Engineer- SBOM, CBOM-Irving TX- All 3 Days Onsite

Hi,

Please review the below job requirement and let me know if you are good to submit with the below details filled and your latest resume ASAP.

Senior DevSecOps Engineer- SBOM, CBOM

Irving TX- All 3 Days Onsite

SBOM / CBOM Inventory, Vulnerability Scanning & AI Auto-Remediation

We are looking for a hands-on Senior DevSecOps Platform Engineer to help build an internal security automation platform for SBOM/CBOM inventory, vulnerability scanning, and Claude-based auto-remediation.

This is not a traditional full-stack developer role. The right candidate should be able to build applications, design CI/CD pipelines, integrate security scanning tools, understand cryptography inventory, and automate remediation safely.

Required Skills

Hands-on experience with Jenkins and/or GitLab CI/CD.

Strong understanding of SBOM, dependency scanning, transitive dependencies, CVEs, and container image scanning.

Experience with tools such as Syft, Grype, CycloneDX, SPDX, JFrog Xray, Sonatype, Checkmarx, Fortify, or Veracode.

Good understanding of CBOM and cryptography inventory, including TLS/HTTPS, certificates, keys, cipher suites, encryption algorithms, hashing algorithms, signing algorithms, keystores, truststores, and secrets.

Ability to identify weak crypto such as MD5, SHA-1, DES/3DES, RC4, RSA-1024, TLS 1.0/TLS 1.1, and disabled certificate validation.

Hands-on AWS experience with services such as Lambda, API Gateway, S3, DynamoDB, IAM, ECS/EKS, CloudWatch, X-Ray, Secrets Manager, and KMS.

Experience with observability tools such as Splunk, ELK/Kibana, CloudWatch, and X-Ray.

Strong hands-on experience with Java/Spring Boot.

Experience with at least one additional language such as Node.js, Python, or Go.

Experience building REST APIs, microservices, batch jobs, and platform integrations.

Strong troubleshooting skills across application, pipeline, cloud, and security issues.

The candidate should understand how to use Claude or similar AI tools in a controlled engineering workflow