Staff Software Engineer, Platform Security
About the role
Make the secure path the easy path for 80 products. You will lead the engineering of our software supply-chain controls, from build provenance and SBOMs to the security gates every release must pass.
What you'll do
- Own the architecture for build provenance, signing and software bills of materials across our products
- Build and scale the CI/CD security gates (SAST, DAST, dependency and licence checks) engineers rely on
- Design paved-road tooling that lets product teams ship quickly without bypassing controls
- Lead incident response for supply-chain vulnerabilities such as the next Log4j
- Mentor senior engineers and set technical direction with the CISO's office
What you'll bring
- 10+ years of software engineering, including significant security or platform work
- Deep experience with CI/CD systems, containers and infrastructure-as-code
- Track record of leading cross-team technical initiatives
- Strong grasp of software supply-chain threats and mitigations
Nice to have
- Contributions to SLSA, Sigstore or similar projects
- Experience supporting FedRAMP or DoD workloads
Compensation
$305,000 – $345,000 per year
Where you land in the range depends on your experience and skills, not on how well you negotiate.
Working at Moraph
We build and operate software for credit unions, hospitals and government agencies, where a failure means a regulatory breach or a patient-safety incident. We work as one team across New York, London, Sydney, Buenos Aires, Yerevan, Mumbai, Manila and more, on the same tools and to the same standards. Everyone gets the same high-spec laptop, software and security tooling, whichever office they work from.
Moraph is an equal opportunity employer. We welcome applicants of every background and provide reasonable accommodations throughout the hiring process. Email careers@moraph.com if you need one.