Information Security Engineer

at Sonatype

Job description

Sonatype is the software supply chain security company. We provide the world’s best end-to-end software supply chain security solution, combining the only proactive protection against malicious open source, the only enterprise grade SBOM management and the leading open source dependency management platform. This empowers enterprises to create and maintain secure, quality, and innovative software at scale.

As founders of Nexus Repository and stewards of Maven Central, the world’s largest repository of Java open-source software, we are software pioneers and our open source expertise is unmatched. We empower innovation with an unparalleled commitment to build faster, safer software and harness AI and data intelligence to mitigate risk, maximize efficiencies, and drive powerful software development.

More than 2,000 organizations, including 70% of the Fortune 100 and 15 million software developers, rely on Sonatype to optimize their software supply chains.

About the Role

  • We are seeking a skilled Information Security Engineer to join our team and play a crucial role in securing our digital assets. This role offers an exciting opportunity to work with cutting-edge security tools, collaborate with global teams, and contribute to strengthening our cybersecurity framework.

Key Responsibilities

  • Conduct vulnerability scans, analyze results, and support remediation efforts.
  • Manage security incidents, including response, resolution, and prevention.
  • Proactively protect digital assets, mitigating risks before breaches occur.
  • Implement, configure, and upgrade security tools and systems.
  • Evaluate, integrate, and configure security technologies to enhance protection.
  • Collaborate with technical teams, product managers, and third-party vendors on security initiatives.
  • Respond to cybersecurity alerts, monitor logs, and manage security events.
  • Perform technical risk assessments on software, tools, and third-party integrations.
  • Identify vulnerabilities in infrastructure and provide risk-based recommendations.

What We’re Looking For

  • 8+ years of experience in software development or security engineering.
  • 7+ years of experience in DevOps and security operations.
  • 7+ years handling incident response and escalation.
  • Strong understanding of vulnerability management and scanning tools.
  • Familiarity with common security frameworks, protection methods, and DevSecOps.
  • Experience with SAST, DAST, SCA, or related security testing tools.
  • Hands-on experience conducting security reviews (architecture, source code, infrastructure).
  • Experience deploying automated/custom vulnerability scans.
  • Knowledge of cloud and infrastructure security principles.

Bonus Skills (Good to Have)

  • Knowledge of web application security (e.g., OWASP Top 10).
  • Understanding of security architecture principles.
  • Familiarity with threat modeling frameworks and security assessments.
  • Relevant certifications such as:
  • SANS Certifications: GSEC, GCIH, GCLD, GCID, GMON
  •  (ISC)² Certifications: CISSP, CC, SSCP, CCSP, CAP, CSSLP

Why Join Us?

  • Work with a global team at the forefront of cybersecurity.
  •  Exciting career growth opportunities with industry-leading experts.
  • Work-from-home flexibility with a strong work-life balance.
  • Continuous learning & certification support to advance your skills.

At Sonatype, we value diversity and inclusivity. We offer perks such as parental leave, diversity and inclusion working groups, and flexible working practices to allow our employees to show up as their whole selves. We are an equal-opportunity employer, and we do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status. If you have a disability or special need that requires accommodation, please do not hesitate to let us know.

Share this job:
Please let Sonatype know you found this job on Remote First Jobs 🙏

Similar Remote Jobs

Benefits of using Remote First Jobs

Discover Hidden Jobs

Unique jobs you won't find on other job boards.

Advanced Filters

Filter by category, benefits, seniority, and more.

Priority Job Alerts

Get timely alerts for new job openings every day.

Manage Your Job Hunt

Save jobs you like and keep a simple list of your applications.

Search remote, work from home, 100% online jobs

We help you connect with top remote-first companies.

Search jobs

Hiring remote talent? Post a job

Frequently Asked Questions

What makes Remote First Jobs different from other job boards?

Unlike other job boards that only show jobs from companies that pay to post, we actively scan over 20,000 companies to find remote positions. This means you get access to thousands more jobs, including ones from companies that don't typically post on traditional job boards. Our platform is dedicated to fully remote positions, focusing on companies that have adopted remote work as their standard practice.

How often are new jobs added?

New jobs are constantly being added as our system checks company websites every day. We process thousands of jobs daily to ensure you have access to the most up-to-date remote job listings. Our algorithms scan over 20,000 different sources daily, adding jobs to the board the moment they appear.

Can I trust the job listings on Remote First Jobs?

Yes! We verify all job listings and companies to ensure they're legitimate. Our system automatically filters out spam, junk, and fake jobs to ensure you only see real remote opportunities.

Can I suggest companies to be added to your search?

Yes! We're always looking to expand our listings and appreciate suggestions from our community. If you know of companies offering remote positions that should be included in our search, please let us know. We actively work to increase our coverage of remote job opportunities.

How do I apply for jobs?

When you find a job you're interested in, simply click the 'Apply Now' button on the job listing. This will take you directly to the company's application page. We kindly ask you to mention that you found the position through Remote First Jobs when applying, as it helps us grow and improve our service 🙏

Apply