Back to Jobs
Recently postedTechnology

Security Software Engineer - Source Control

Advantage TechnicalLivingston, NJ🇺🇸United States

Quick overview

SeniorityMid Senior
Work modeHybrid
LocationLivingston, NJ, United States
GitAWSSOC 2BashGitHub ActionsGoogle CloudGraphQLPythonRESTAzureCI/CD

Job description

We're looking for a Security Software Engineer to strengthen the security and governance of our source control environment, working primarily within GitHub. You'll design, automate, and enforce the policies and controls that keep our code, pipelines, and repositories secure and compliant, partnering with engineering, DevOps, and security teams to build guardrails that protect the organization without slowing developers down.

Key Responsibilities
Define and enforce GitHub governance standards, including branch protection, repository rulesets, access controls, CODEOWNERS, and org/enterprise-level policies
Build and maintain secure CI/CD workflows in GitHub Actions using YAML, including hardening runners, secrets management, and supply chain protections
Develop Go-based tooling and services to automate security checks, policy enforcement, and repository auditing
Write Python and Bash scripts for automation, reporting, remediation, and integration with the GitHub API
Implement and tune code security capabilities such as secret scanning, dependency scanning, and code scanning (e.g., GitHub Advanced Security)
Monitor for policy drift and misconfigurations, and lead remediation across repositories
Support audit and compliance efforts with clear documentation and evidence of controls

Required Skills
Hands-on experience administering and securing GitHub at the organization or enterprise level
Strong Go development skills and proficiency in YAML-based configuration
Scripting experience with Python and Bash
Solid understanding of secure SDLC, CI/CD security, and software supply chain risks
Experience working with the GitHub REST and/or GraphQL APIs
Nice to Have
GitHub Advanced Security experience
Familiarity with policy-as-code tools (e.g., OPA) and frameworks like SLSA or SOC 2
Exposure to cloud platforms (AWS, Azure, or Google Cloud Platform)
The base pay range listed reflects what we reasonably expect to offer for this role.

Actual pay may vary based on location, experience, and performance. Depending on the position, benefits may include medical, dental, and vision coverage; retirement and savings plans; paid holidays and time off; supplemental insurance; and additional wellness or incentive programs.

About Us
Advantage Technical connects top- talent in technology, engineering, and technical fields with forward-looking companies. Advantage Technical is an equal opportunity employer. All applicants will receive consideration without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or veteran status, or any other legally protected status. Advantage Technical offers reasonable accommodations for qualified individuals with disabilities; contact your local branch for inquiries. Advantage Technical is an E-Verify employer.

See our Privacy Notice for Candidates and Employees/Contractors at By applying, you consent to receive AI-generated and non-AI-generated calls, texts, or emails from Staffmark Group, its affiliates, and partners. Frequency varies and message/data rates may apply. Reply STOP to cancel or HELP for help.

Similar jobs