2 hours ago
London, United KingdomMid Level
Responsibilities
- Partner with engineering stakeholders to understand development landscapes and security needs.
- Develop, maintain, and enhance automated security solutions integrated into software development pipelines.
- Prototype tools, integrate security testing capabilities, and develop custom scalable security automation.
- Research technology stacks and develop or enhance custom code analysis queries.
- Communicate vulnerability findings and work with stakeholders on mitigations.
- Monitor trends in automated security, secure development, and AI-assisted security workflows.
- Develop and enhance operational runbooks.
- Perform vulnerability discovery, code review, and static analysis for engineering teams, applications, and services.
- Build or adopt capabilities for software composition analysis, secret searching, and other automated security testing.
- Use LLMs and AI-assisted workflows for security assessments, vulnerability research, secure code review, developer enablement, and security automation.
- Evaluate and build LLM tooling integrations, including agentic workflows, retrieval-augmented workflows, MCP servers, and development and security tooling integrations.
Requirements
- At least 3 years of software development experience.
- Strong software engineering background and programming experience in at least one of C/C++, Python, or JavaScript/TypeScript.
- Knowledge of DevOps and development-pipeline software such as GitHub and Jenkins.
- Working knowledge of build systems, package managers, and development tooling such as CMake, npm, Maven, and Gradle.
- Understanding of common security vulnerabilities, including OWASP Top 10 issues and language-specific vulnerabilities.
- Experience using, evaluating, or building with LLMs or AI-assisted tooling in technical workflows.
- Ability to combine technical knowledge with core information security program concepts.
- Motivation to keep current with information security trends and techniques.
- Excellent written and verbal communication skills.
- Preferred familiarity with CodeQL, Semgrep, programming language ecosystems, cloud providers, Kubernetes, Docker, cloud deployment orchestration, open source component management, software composition analysis, and security testing in DevOps pipelines.
- Technical information security certifications such as CISSP, CSSLP, or SANS certifications are preferred.
- Applicants from all experience levels may be considered if they can demonstrate the necessary skills.
Tech Stack
AWSAzureCC++CMakeDockerGoGoogle Cloud PlatformGradleJavaJavaScriptJenkinsKubernetesMavennpmPythonRustTypeScript
Categories
About Bloomberg
Bloomberg is a global leader in business and financial information, delivering trusted data, news, and insights that bring transparency and efficiency, and fairness to markets. We help connect influential communities across the global financial ecosystem via reliable technology solutions that enable our customers to make more informed decisions and foster better collaboration. We challenge the status quo through constant innovation. We collaborate broadly because we know that other perspectives matter. We put our customers first, as a guiding beacon. And we believe doing the right thing – by our people, our clients, and our communities – is the best thing for our business.