Senior Staff R&D Engineer Software Supply Chain Curation

Role Description

We are looking for a Senior Staff R&D Engineer to own significant capabilities in a platform that evaluates third-party and open-source components before they enter development and build environments. The role supports a broad product portfolio, with a strong foundation in C, C++, and Perforce, plus Python-based automation and integrations. The engineer will connect curation controls to Jenkins, GitHub or Azure DevOps Server, Black Duck, and JFrog while accommodating additional languages and build ecosystems where required.

What Success Looks Like

The engineer independently delivers and operates major curation capabilities, covers the needs of C/C++ products using Perforce, enables adoption across varied product teams, and improves decision quality, traceability, and developer experience.

Key Qualifications

• Bachelor’s or master’s degree in computer science, software engineering, information security, or a related discipline, or equivalent practical experience.
• Strong hands-on software engineering experience in C and C++.
• Hands-on experience with Perforce in a production software-development environment.
• Experience with Python for automation, integration, services, or data-processing tasks.
• Experience with Jenkins and with at least one of GitHub or Azure DevOps Server.
• Experience using Black Duck and JFrog in SSDLC, software composition analysis, artifact management, or software supply-chain workflows.
• Ability to support products that use programming languages and build ecosystems beyond C, C++, and Python.
• Ability to communicate complex technical decisions clearly in English.
• Demonstrated ownership of complex backend services or enterprise developer-platform capabilities.
• Practical knowledge of software composition analysis, vulnerability metadata, open-source licensing, or provenance.

Key Responsibilities

• Own the design, implementation, testing, and operation of major curation capabilities.
• Develop services that normalize package, vulnerability, license, and provenance information.
• Implement robust integrations for Perforce-based development and Jenkins automation.
• Integrate Black Duck and JFrog into component assessment, artifact, policy, and evidence workflows.
• Provide compatible patterns for GitHub and Azure DevOps Server environments.
• Lead technical reviews, diagnose complex failures, and drive sustainable improvements.
• Mentor engineers and create reusable implementation patterns.

Preferred Experience

• Knowledge of SBOM and VEX formats such as CycloneDX or SPDX.
• Experience with containers, Kubernetes, infrastructure as code, or cloud-native operations.