Malcode & CBOM Development and Operations Support Engineer

We are seeking a developer to support the development, enhancement, and operationalisation of the Malcode and CBOM initiatives. The role combines Python and Angular development with application security assessment, remediation validation, automation, and operational support. Candidates must have more than 2 years of relevant experience, hands-on Python and Angular development skills, and basic application security knowledge.

Key Responsibilities:

Development & Enhancement:

• Develop and enhance Malcode and CBOM capabilities using Python and Angular.
• Implement automation and workflow improvements to support efficient analysis and operations.
• Develop integrations with supporting security tools and repositories.
• Enhance analysis, dashboards, and reporting functionality.
• Perform testing, support deployment, and maintain technical documentation.

Security Analysis & Remediation Support:

• Assess findings for technical accuracy, exploitability, severity, and business impact.
• Identify false positives, duplicate findings, and unsupported attack chains.
• Review source code, logs, and technical artefacts to validate findings.
• Validate remediation activities and conduct retesting to confirm that identified issues have been addressed.
• Provide advisory support to application teams on appropriate remediation approaches.

Operations, Process Management & Governance:

• Establish and maintain operating procedures for Malcode and CBOM initiatives.
• Manage finding lifecycle processes from identification through remediation and closure.
• Track remediation progress and risk disposition, including items requiring further review or approval.
• Produce operational reports and management updates.
• Coordinate with stakeholders and support governance reviews.

Requirements:

• More than 2 years of relevant software development experience.
• Hands-on experience developing applications or automation solutions using Python.
• Hands-on experience developing frontend applications using Angular.
• Basic knowledge of application security, common vulnerabilities, and secure coding practices.
• Ability to review source code, logs, and technical evidence to assess security findings.
• Experience with application testing, deployment, and technical documentation.
• Strong analytical, troubleshooting, and communication skills.
• Ability to work effectively with application teams and security stakeholders.

Preferred Experience:

• Integration with security tools, APIs, and code repositories.
• Development of analysis dashboards and automated reporting.
• Security finding validation, remediation tracking, and retesting.
• Establishing operational workflows and supporting governance processes.

To apply,simply click the "Apply" button or send your updated profile to [email protected] 

EA Licence No.:18S9405 / EA Reg. No.:R1330864

Percept Solutions is expanding and actively seeking talented individuals. We encourage applicants to follow Percept Solutions on LinkedIn at https://www.linkedin.com/company/percept-solutions/to stay informed about new opportunities and events.

Skills

Security Assessments, Reporting Tools, Security Tools, test documentation, Application Testing, Application Security, Post Deployment Support, AngularJS, Workflow Analysis, Angular (Web Framework), automation applications, Python, Reporting Accuracy, Web Application Security, Security Consulting, Security Analysis, Security Applications