Software Engineer - Sonatype Developer SAST
Sonatype, Colombia

Sonatype is the software supply chain management company. We're on a mission to change how the world innovates by making software development easier. From running the world's largest repository of Java open-source components (Maven Central) to inventing componentized software development and then software supply chain management to creating the only solution that stops malicious open-source malware in its tracks, we're constantly leading the industry while helping thousands of customers manage open source every day.
Already used by 15 million developers, we have lofty goals for our technology to be in the hands of every engineering team. And we need you to do that. Join us!
Learn more at www.sonatype.com.

We are looking for team members that want to help us change the way the world innovates through software. The Sonatype team has already done this through its contributions to the Maven build system, the Nexus Repository Manager and Nexus Lifecycle, and most recently with Sonatype Developer and the Sonatype Platform literally changing the way the world creates and delivers software across thousands of organizations and millions of developers.
That was just the beginning. We need your help so that we can do it again. If you are interested in delivering value across nearly every decision made in the world of software development, to help companies create better and safer software faster, to transform innovation through software, read on.Who we are and what you'll do

• You have foundational knowledge in software engineering and would like to expand your skill set in quality, testing, debugging, design and security of it.
• You are motivated by the opportunity to contribute to improving the Software Supply Chain and Static Application Security Testing. You will be a member of the Sonatype Developer SAST Team.

• You will be responsible for the back-end processing that supports the static analysis capability and work with the teams supporting that software to incorporate changes needed to trigger static analysis, monitor the progress of static analysis, and retrieve results. This may involve building new command line utilities, new services, and APIs.
• You will collaborate not only with your primary team on projects but with other Sonatype product teams as well.

What skills you'll need

• 2-5 years of experience with Kotlin, Java and Java frameworks.
• Experience or familiarity with React JS.
• Working knowledge of contemporary DevOps pipelines.Knowledge of multiple programming languages, especially more niche / emerging languages such as Rust, Kotlin, Haskell, OCaml, Clojure, Scheme, Lisp, Datalog, or PrologKnowledge of graph databases (Neo4j, JGraphT)Experience writing compilers or interpreters. Professional experience is preferred but course projects would also be qualifying.
• Experience using static analysis tools. Especially experience using these tools in a large enterprise environment.
• You can demonstrate an understanding of how software is built and delivered.
• Understand version control and continuous integration.
• Passionate about lifelong learning and willing to tinker in different product technology stacks and/or languages.

At Sonatype, we value diversity and inclusivity. We offer perks such as parental leave, diversity and inclusion working groups, and flexible working practices to allow our employees to show up as their whole selves. We are an equal-opportunity employer, and we do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status. If you have a disability or special need that requires accommodation, please do not hesitate to let us know.

#LI-Remote