Embedded Security & Open Source Compliance

Job Description:

• Architect and automate open-source license compliance workflows (SCA, SBOM generation, reproducible builds)
• Build scalable CI/CD pipelines (GitHub/GitLab) and enforce security gates across embedded and app stacks.
• Govern artifacts and dependency health (Conan, Snapcraft, Artifactory, Xray)
• Triage vulnerabilities (SAST/DAST/IAST, CodeQL, SonarQube, ScanCode) and drive remediation plans.
• Create clear, developer-friendly documentation, SOPs, and training
• Partner closely with Engineering, Legal, vendors, and leadership to ensure compliance with standards like ISO 27001, ISO/IEC 5230, and SOC2
• Build security & compliance dashboards using Power BI + SQL for decision-making

Education: Bachelor’s or Master’s in Computer Engineering, Electrical Engineering, Computer Science, or a closely related field. Security certifications (e.g., CISSP, CSSLP) are a plus.

GlobalLogic estimates the starting pay range for this role to be performed in Dallas, TX, to be $125,000 to $135,000, and reflects base salary only. This pay range is provided as a good-faith estimate, and the amount offered may be higher or lower. GlobalLogic takes many factors into consideration in making an offer, including candidate qualifications, work experience, operational needs, travel and onsite requirements, internal peer equity, prevailing wage, responsibilities, and other market and business considerations.