Senior Python Engineer - Open Source Stewardship & Tooling

Insight Global • Raleigh, NC • 6h ago

Job Description

A client of Insight Global is looking for a Senior Software Engineer. In this role, you will work as part of a team responsible for establishing the technical

stewardship capabilities required by the EU Cyber Resilience Act (CRA).

You will focus on developing the tooling and infrastructure necessary to generate comprehensive Software Bill of Materials (SBOMs) for critical open-source community

projects and integrating these manifests into Red Hat's incident response workflows.

You will build automated solutions that bridge the gap between upstream project development and downstream security compliance, ensuring rapid detection of

vulnerabilities in open-source components. You will collaborate with internal security teams and external open-source communities to align on data standards and "secure by design" principles.

Primary Job Responsibilities

? Design and develop automated tooling to generate and maintain Software Bill

of Materials (SBOMs) for upstream open-source projects in standardized

machine-readable formats (e.g., SPDX, CycloneDX).

? Integrate SBOM generation into community Continuous Integration (CI)

systems to ensure real-time tracking of top-level and transitive dependencies,

including the generation of unique component identifiers (CPE, PURL).

? Build "Early Warning" workflows by connecting community SBOMs with Red

Hat's Product Security Incident Response Team (PSIRT) tooling, enabling the

automatic mapping of new vulnerabilities (CVEs) to impacted upstream projects.

? Implement machine-readable advisory generation (CSAF VEX) for

community projects to support transparency and automated vulnerability

handling requirements.

? Continuously improve tooling to reduce the average time to patch critical

vulnerabilities in stewarded open-source components.

We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment regardless of their race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or recruiting process, please send a request to HR@insightglobal.com.To learn more about how we collect, keep, and process your private information, please review Insight Global's Workforce Privacy Policy: https://insightglobal.com/workforce-privacy-policy/.

Skills and Requirements

Advanced (5+ years) knowledge of Python programming language and their

ecosystems.

4+ years experience designing non-trivial algorithms and systems.

2+ years developing and testing applications using Python programming language and adjacent ecosystem.

? Deep understanding of Software Supply Chain Security concepts, including

SBOM standards (SPDX, CycloneDX) and vulnerability data formats (CSAF,

VEX, OSV).

? Intermediate (3+ years) experience with relational databases (e.g., PostgreSQL)

for managing vulnerability and component metadata.

? Experience with CI/CD pipelines (e.g., Tekton, GitHub Actions, GitLab CI) and

integrating security scanning tools into build processes.

? Interest in the container ecosystem (Kubernetes, Red Hat OpenShift, Podman).

? Good written and verbal communication skills in English, with a strong ability to

collaborate in open-source communities

Similar Jobs

Senior AI Systems Engineer

Applied Research Associates, Inc. • Raleigh, NC • 12min ago

IT & Engineering

Description Essential Functions: Lead the deployment, integration, and operational support of AI platforms, tools, and services, ensuring compatibility with existing systems and enterprise processes. Design, implement, m...

12min ago

Go to Apply

Negative Certifying Technician - Toxicology

Labcorp • Durham, NC • 15h ago

IT & Engineering

Labcorp is seeking a Negative Certifying Technician to join our team in RTP NC. Work schedule: Tuesday-Saturday 4:00pm-12:30am Job Responsibilities: Review all test results for applicable screening testing and specimen v...

15h ago

Go to Apply

Electrical Assembler

ManpowerGroup • Wendell, NC • 20h ago

IT & Engineering

Our client, a leader in electrical distribution equipment manufacturing, is seeking an Electrical Assembler to join their team. As an Electrical Assembler, you will be part of the manufacturing support team supporting el...

20h ago

Go to Apply

Traffic Project Engineer I

Johnson, Mirmiran, and Thompson Inc. • Raleigh, NC • 1d ago

IT & Engineering

Johnson, Mirmiran & Thompson is a dynamic, 100% employee-owned consulting firm with more than 2,800 professionals, providing a full range of multidisciplinary engineering, architecture, information technology, and re...

1d ago

Go to Apply

Senior Mechanical Engineer - Conventional Generation Job Details | Black & Veatch Family of Companies

Black & Veatch • Cary, NC • 1d ago

IT & Engineering

Senior Mechanical Engineer - Conventional Generation Date: Apr 1, 2026 Location: Overland Park, KS, US Cary, NC, US Ann Arbor, MI, US Company: Black & Veatch Family of Companies Together, we own our company, our futu...

1d ago

Go to Apply

Mechanical Engineering Intern - Summer 2026

Jacobs • Cary, NC • 1d ago

IT & Engineering

We're seeking a Mechanical Engineering Intern with an interest in HVAC, Plumbing, and Fire Protection Systems in buildings to join our Life Sciences team in Cary, NC. You'll have the opportunity to use your theoretical k...

1d ago

Go to Apply

Senior Mechanical Engineer

Siemens • Wendell, NC • 1d ago

IT & Engineering

Job Family: Electrification & Automation Req ID: 501452 Company: Siemens Industry, Inc. Location: 7000 Siemens Road, Wendell, NC 27591 Position Title: Senior Mechanical Engineer Hours: Monday - Friday, 8:00 am to 5:0...

1d ago

Go to Apply

Sr. Software Engineer II

Insight Global • Raleigh, NC • 1d ago

IT & Engineering

Job Description Design and implement AI Interfaces, workflows and orchestration logic Build and integrate tool using agents with internal and external systems Implement observability, evaluation, and reliability mechanis...

1d ago

Go to Apply

Software Engineer

Highmark Health • Raleigh, NC • 1d ago

IT & Engineering

Company : enGen Job Description : JOB SUMMARY This job is an integral member of an agile software engineer team responsible for building complex scalable software applications across all digital channels to serve our cus...

1d ago

Go to Apply

Software Engineer Lead

Insight Global • Raleigh, NC • 1d ago

IT & Engineering

Job Description We are seeking a Senior Software Engineering Lead who began their career as a hands-on software developer and has evolved into a technical leader with strong exposure to Generative AI. This role balances...

1d ago

Go to Apply

Subscribe to get new jobs sent directly to you
(no charge, cancel anytime)

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.