"Secure Supply Chain Software Engineer
The Secure Supply Chain team, within SDLC, is a function focused on ensuring that the code Goldman Sachs deploys is as secure as possible. We blend third-party tooling with in-house systems to improve the security of many types of code including backend, frontend, infrastructure, and mobile.
HOW YOU WILL FULFILL YOUR POTENTIAL
• Build and design systems that secure the entirety of Goldman Sachs' software supply chain.
• Build and integrate systems detecting third-party vulnerabilities in libraries, OS and container components, etc.
• Integrate with our GitLab, CI/CD, and build attestation systems.
• Partner effectively with Goldman's infrastructure teams and other security teams.
• Collaborate with developers across Goldman Sachs to ensure our systems are embedded in their workflows.
SKILLS AND EXPERIENCE WE ARE LOOKING FOR
• 3+ years of industry experience as a programmer, developer, SWE, or similar job roles.
• General knowledge of multiple languages, and in-depth knowledge of at least one of: Golang, Java, Python
• General knowledge of Linux, Docker, Kubernetes, Terraform, AWS
• Knowledgeable about networking (TCP, UDP, ICMP, ARP, DNS, TLS, HTTP, SSH, etc)
• Experience with DevOps and IAC (Infrastructure as Code)
• Experience with all stages in the lifecycle of developing and running large distributed systems
• Experience managing performance, availability, and scale of mid- to large-sized systems
• Good but not required to have experience in:
o Kafka or similar event streaming platforms
o Relational databases
o SRE best practices
• Team player, eager to work in a global organization
• Highly entrepreneurial and motivated
• Strong oral and written communication skills
VC Panel Competencies:
Software design and architecture, depth on resume area (e.g., design a producer / consumer architecture, create a performance test framework for a distributed system)"