---

---

Location

Portsmouth, NH | United States

---

Job description

Pay Philosophy

The typical starting salary range for this role is determined by a number of factors including skills, experience, education, certifications and location. The full salary range for this role reflects the competitive labor market value for all employees in these positions across the national market and provides an opportunity to progress as employees grow and develop within the role. Some roles at Liberty Mutual have a corresponding compensation plan which may include commission and/or bonus earnings at rates that vary based on multiple factors set forth in the compensation plan for the role.

Description

Do you have the skills - and drive - to join a tech team thats working to digitally transform a trillion-dollar industry? From test-driving the latest technologies to creating intuitive consumer apps, Liberty Mutual is constantly innovating and creating industry-leading solutions that provide peace of mind for our customers worldwide. As a senior software engineer at Liberty Mutual, youll apply your talents in an agile environment that has the creative energy of a start-up - and the full backing and comprehensive benefits of a Fortune 100 company.

The Software Delivery team in Secure DevOps Platforms is hiring a Secure Supply Chain Engineer to help change the evolution of our secure coding and delivery practices within Liberty Mutual. This position will be a member of our newer secure supply chain team, leading the evaluation and implementation of new techniques and tooling in support of our global software delivery platform. You will be responsible for analyzing our CI/CD pipelines and source code to detect complex vulnerabilities. You will develop frameworks and tools to perform automated detection of vulnerabilities and data misconfiguration at the enterprise scale. You will work to help identify, educate, and instruct teams in mitigating and/or eliminating these risks.

We encourage you to apply and bring your expertise if youre a:

• Technical problem solver: Going far beyond simply developing error-free source code, test scripts, components, and system architectures, youll document and build deployment guides aimed at maintaining robust, relevant software.
• Customer-centric engineer: Putting clients needs first, youll translate customer requirements into technical applications and support the implementation of new software.
• Motivated mentor: Exercise your technical capabilities while coaching and collaborating with software engineers at all levels.
• Forward thinker: Merely fixing a problem isnt enough. Using your proactive mindset and initiative, you will also identify opportunities to enhance performance, quality, and efficiency. Also, you will need to be able to communicate the implementation we have established.

Responsibilities

• Improve upon and further integrate the Secure Development Lifecycle (SDLC)
  into product design and engineering efforts.
• Empower secure-by-default development by shipping libraries and frameworks
  that address classes of vulnerabilities at scale.
• Assist with code reviews to proactively identify potential vulnerabilities, and
  follow-up with tooling to prevent future vulnerabilities.
• Conducts multidisciplinary research and collaborates with developers in the
  planning, design, development, and utilization of cyber security best practices in
  support of product and commercial software development.

Qualifications

• Six or more years of software engineering experience
• Strong background in business operations and strategies, including global
  technology and financial services trends
• Hands-on involvement with layered systems architectures, designs and shared
  software concepts
• Familiarity with functional and system integration testing
• Experience with threat modeling and handling vulnerability reports

• Experience partnering with cross-functional engineering and product teams
• Experience with start-up environments is a plus
• Design and implement automation security tools and frameworks (CI/CD
  pipelines); exposure to NIST is a plus
• Must have hands-on experience in Continuous Integration/Continuous
  Deployment (CI/CD) environment.
• Experience with Github Actions and Github Advanced Security is preferred but
  not required.
• Proficiency in software engineering languages and tools, including Python, Typescript, and AWS; Node.js is a plus.
• A Bachelors or Masters degree in a technical or business discipline, or
  equivalent experience

About Us

At Liberty Mutual, our purpose is to help people embrace today and confidently pursue tomorrow. That's why we provide an environment focused on openness, inclusion, trust and respect. Here, you'll discover our expansive range of roles, and a workplace where we aim to help turn your passion into a rewarding profession.

Liberty Mutual has proudly been recognized as a "Great Place to Work" by Great Place to Work US for the past several years. We were also selected as one of the "100 Best Places to Work in IT" on IDG's Insider Pro and Computerworld's 2020 list. For many years running, we have been named by Forbes as one of America's Best Employers for Women and one of America's Best Employers for New Graduates as well as one of America's Best Employers for Diversity. To learn more about our commitment to diversity and inclusion please visit:

We value your hard work, integrity and commitment to make things better, and we put people first by offering you benefits that support your life and well-being. To learn more about our benefit offerings please visit:

Liberty Mutual is an equal opportunity employer. We will not tolerate discrimination on the basis of race, color, national origin, sex, sexual orientation, gender identity, religion, age, disability, veteran's status, pregnancy, genetic information or on any basis prohibited by federal, state or local law.

Fair Chance Notices

---

Job tags

---

---

Salary

$103.4k - $192.7k