At a Glance
- Tasks: Join our team to enhance software security and improve developer productivity.
- Company: Bloomberg is a leading global financial services firm focused on technology and innovation.
- Benefits: Enjoy a dynamic work environment with opportunities for remote work and professional growth.
- Why this job: Make a real impact on software security while collaborating with talented engineers across the company.
- Qualifications: Experience in Python or Go, and a passion for software security are essential.
- Other info: Be part of a team influencing industry standards and tackling exciting challenges.
The predicted salary is between 48000 - 72000 £ per year.
Senior Software Engineer – DevX SCAnS (Developer Experience)
Location
London
Business Area
Engineering and CTO
Ref #
10043757
Description & Requirements
In Bloomberg, the Developer Experience (DevX) group provides services and tooling that empowers over 9,000 engineers with their productivity needs and enables them to write high quality, performant and secure code.
What goes into making Bloomberg's software? Where do these components come from? How will we know if any are defective? How can we protect Bloomberg from malicious actors while still benefiting from open source? These are the questions you'll help us answer!
The Software Composition Analysis and Security (SCAnS) team in DevX plays a foundational role in securing Bloomberg's software supply chain (SSC) by enabling engineers to use open source and third party software safely, in an operationally resilient manner. Our products integrate with build and analysis systems to ensure software component metadata (as SBOMs) is available throughout the SSC to build a software inventory, affording license and vulnerability identification firm-wide. We control the ingress of components to prevent malware from entering the network, which provides us a unique opportunity to help build this inventory.
Our team is responsible for:
- Providing SBOM tooling and helping integrate it into our supply chain
- Working across ecosystems to adjust our tooling to produce the best quality results
- Controlling and tracking the ingress of software components into the firm's network
- Solving the firm's operational resiliency needs for software ingress and component analysis
We are looking for a Senior Software Engineer to drive these projects in the SCAnS team.
What's in it for you?
As an engineer in this growing team, you will be at the heart of Bloomberg's efforts to secure our software supply chain. This domain is extremely important for the firm's security and operational resilience posture, and your work will be equally impactful and leveraged by all engineering teams.
With upcoming regulations around Operational Resilience such as DORA, Software Supply Chain security is a hot topic in the industry and a very dynamic space to be involved in. Our team leverages open-source software (e.g. Syft), and also influences the wider industry on standards for SBOMs and SSC. We also have home-grown solutions for specific problems (e.g. the domain of Ingress), providing a broad mix of technologies and approaches.
We will trust you to:
- Collaborate across multiple teams to perform cross-cutting work
- Work with users to understand their needs
- Develop and deploy scalable solutions to meeting our supply chain needs
- Identify risks with our supply chain end-to-end
You'll need to have:
- Experience in Python or Go
- Knowledge of the software development lifecycle
- A passion for improving the firm's security posture
- A drive to partner and collaborate with users and team members alike
We'd love to see:
- Experience making upstream contributions
- A history of making changes that involve multiple teams
- Knowledge of software supply chains, SBOMs, and how they are used
- An awareness of vulnerability, malware and licensing challenges in third party software
Senior Software Engineer - DevX SCAnS (Developer Experience) employer: Bloomberg
Contact Detail:
Bloomberg Recruiting Team
StudySmarter Expert Advice 🤫
We think this is how you could land Senior Software Engineer - DevX SCAnS (Developer Experience)
✨Tip Number 1
Familiarise yourself with the latest trends in software supply chain security. Understanding concepts like Software Bill of Materials (SBOMs) and how they relate to operational resilience will give you an edge in discussions during interviews.
✨Tip Number 2
Engage with open-source communities, especially those related to tools like Syft. Contributing to these projects can showcase your skills and passion for improving software security, which is highly relevant to the role.
✨Tip Number 3
Network with professionals in the field of software engineering and security. Attend meetups or webinars focused on software supply chains and security practices to gain insights and make connections that could help you stand out.
✨Tip Number 4
Prepare to discuss real-world scenarios where you've collaborated across teams to solve complex problems. Highlighting your experience in cross-functional projects will demonstrate your ability to work effectively within Bloomberg's collaborative environment.
We think you need these skills to ace Senior Software Engineer - DevX SCAnS (Developer Experience)
Some tips for your application 🫡
Understand the Role: Before applying, make sure you fully understand the responsibilities and requirements of the Senior Software Engineer position in the DevX SCAnS team. Familiarise yourself with concepts like SBOMs, software supply chains, and operational resilience.
Tailor Your CV: Highlight your experience in Python or Go, and any relevant projects that demonstrate your knowledge of the software development lifecycle. Make sure to include specific examples of how you've improved security postures or collaborated across teams.
Craft a Compelling Cover Letter: Use your cover letter to express your passion for software security and your drive to collaborate with users. Mention any experience you have with open-source contributions or working on cross-team projects, as this aligns well with the role.
Showcase Relevant Skills: In your application, emphasise your understanding of software supply chains, SBOMs, and the challenges associated with third-party software. This will demonstrate your readiness to tackle the specific challenges faced by Bloomberg's SCAnS team.
How to prepare for a job interview at Bloomberg
✨Showcase Your Technical Skills
Be prepared to discuss your experience with Python or Go in detail. Bring examples of projects you've worked on that demonstrate your understanding of the software development lifecycle and how you’ve contributed to improving security in those projects.
✨Understand the Role of SBOMs
Familiarise yourself with Software Bill of Materials (SBOMs) and their importance in software supply chains. Be ready to explain how you would approach integrating SBOM tooling into existing systems and the benefits it brings to operational resilience.
✨Demonstrate Collaboration Skills
Since the role involves working across multiple teams, prepare to share examples of past experiences where you successfully collaborated with others. Highlight any instances where you made upstream contributions or worked on cross-cutting projects.
✨Stay Informed on Industry Trends
Research current trends and regulations around software supply chain security, such as DORA. Being knowledgeable about these topics will show your passion for the field and your commitment to staying ahead in a dynamic environment.