Senior Software Engineer – DevX SCAnS

In Bloomberg, the Developer Experience (DevX) group provides services and tooling that empower over 9,000 engineers with their productivity needs and enable them to write high-quality, performant, and secure code.

What goes into making Bloomberg’s software? Where do these components come from? How will we know if any are defective? How can we protect Bloomberg from malicious actors while still benefiting from open source? These are the questions you’ll help us answer!

The Software Composition Analysis and Security (SCAnS) team in DevX plays a foundational role in securing Bloomberg’s software supply chain (SSC) by enabling engineers to use open source and third-party software safely, in an operationally resilient manner. Our products integrate with build and analysis systems to ensure software component metadata (such as SBOMs) is available throughout the SSC to build a comprehensive software inventory, facilitating license and vulnerability identification firm-wide....