2 months ago
London, United KingdomMid Level
Responsibilities
- Partner with engineering stakeholders to understand development landscapes and build automated security solutions for development pipelines.
- Maintain and enhance security automation processes and capabilities.
- Research technology stacks and develop or improve custom code-analysis queries.
- Communicate vulnerability findings and collaborate on mitigations.
- Perform vulnerability discovery, code review, and static analysis for engineering teams, applications, and services.
- Build or adopt scalable security capabilities for software composition analysis, secret searching, and other automated testing techniques.
- Use and evaluate LLMs, AI-assisted workflows, agentic workflows, MCP servers, retrieval-augmented workflows, and security-tool integrations.
- Develop and enhance operational runbooks and monitor trends in secure development and automated security capabilities.
Requirements
- At least 3 years of software-development experience and a strong engineering background.
- Strong programming experience in at least one of C, C++, Python, JavaScript, or TypeScript.
- Knowledge of DevOps and development-pipeline software such as GitHub and Jenkins.
- Working knowledge of build systems, package managers, and development tooling such as CMake, npm, Maven, and Gradle.
- Understanding of common security vulnerabilities, including OWASP Top 10 issues and language-specific vulnerabilities.
- Experience using, evaluating, or building with LLMs or AI-assisted tooling in technical workflows.
- Ability to combine technical knowledge with core information-security program concepts.
- Excellent written and verbal communication skills and motivation to keep current with information-security trends.
- Preferred familiarity with CodeQL, Semgrep, programming-language ecosystems, open-source component management, Software Composition Analysis, public cloud providers, Kubernetes, Docker, and cloud deployment orchestration.
- Technical information-security certifications such as CISSP, CSSLP, or SANS certifications are preferred.
- Experience integrating security testing into DevOps pipelines is preferred.
Tech Stack
AWSAzureCC++CMakeDockerGoGoogle Cloud PlatformGradleJavaJavaScriptJenkinsKubernetesMavennpmPythonRustTypeScript
Categories
About Bloomberg
Bloomberg is a global leader in business and financial information, delivering trusted data, news, and insights that bring transparency and efficiency, and fairness to markets. We help connect influential communities across the global financial ecosystem via reliable technology solutions that enable our customers to make more informed decisions and foster better collaboration. We challenge the status quo through constant innovation. We collaborate broadly because we know that other perspectives matter. We put our customers first, as a guiding beacon. And we believe doing the right thing – by our people, our clients, and our communities – is the best thing for our business.