Senior Software Engineer(Security/Automation) - Customer Engineering
Harness
About the Company
Harness is a high-growth company that is disrupting the software delivery market. Our mission is to enable the 30 million software developers in the world to deliver code to their users reliably, efficiently, securely and quickly, increasing customers’ pace of innovation while improving the developer experience. We offer solutions for every step of the software delivery lifecycle to build, test, secure, deploy and manage reliability, feature flags and cloud costs. The Harness Software Delivery Platform includes modules for CI, CD, Cloud Cost Management, Feature Flags, Service Reliability Management, Security Testing Orchestration, Chaos Engineering, Software Engineering Insights and continues to expand at an incredibly fast pace.
Harness is led by technologist and entrepreneur Jyoti Bansal, who founded AppDynamics and sold it to Cisco for $3.7B. We’re backed with $425M in venture financing from top-tier VC and strategic firms, including J.P. Morgan, Capital One Ventures, Citi Ventures, ServiceNow, Splunk Ventures, Norwest Venture Partners, Adage Capital Partners, Balyasny Asset Management, Gaingels, Harmonic Growth Partners, Menlo Ventures, IVP, Unusual Ventures, GV (formerly Google Ventures), Alkeon Capital, Battery Ventures, Sorenson Capital, Thomvest Ventures and Silicon Valley Bank.
About the Role
We are looking for a skilled Senior Software Engineer/Software Engineer who will be responsible for supporting our customers to implement and manage security tools within CI/CD pipelines, and who is also capable of real-time technical troubleshooting.
This role involves deep technical analysis, real-time troubleshooting of production issues, and the critical design and implementation of security orchestration across customer CI/CD pipelines, integrating tools for SAST, DAST, and SCA to enhance their software supply chain posture and compliance. You will work closely with customers to ensure seamless product operation, create diagnostic and recovery scripts, and contribute to automating deployment, monitoring, and issue-resolution workflows.
Key Responsibilities
- Work closely with customer teams to identify, diagnose, and resolve product-related issues in real-time production environments.
- Provide technical assistance and troubleshooting support to customers during on-prem and cloud environments.
- Design and implement orchestration of multiple security scanners (SAST, DAST, SCA, container, config, secret scans) in CI/CD pipelines.
- Monitor and mitigate open-source and third-party component risks (licensing, vulnerabilities, dependency health).
- Build visibility dashboards showing supply-chain posture, risk scoring, and compliance metrics.
- Collaborate with Engineering, Security, and DevOps to embed security seamlessly across workflows.
- Analyze logs, metrics, and configurations to troubleshoot performance, networking, and connectivity issues.
- Maintain a deep understanding of customer environments and guide them through best practices.
- Document issues, workarounds, and solutions in internal knowledge bases to drive continuous improvement.
Required Skills and Qualifications
- 4+ years in a technical support, DevOps, or Security and system administration role.
- Hands-on experience in CI/CD pipelines, build systems, integrating security scanning as part of DevSecOps practices.
- Strong understanding of security testing types: SAST, DAST, SCA, container/image scanning, configuration scans.
- Hands-on experience in Appsec tools like Checkmarx, Blackduck , Snyk, Veracode, etc
- Experience with dashboards, reporting vulnerability trends, vulnerability triaging and remediation.
- A deep understanding of what SBOMs are, hands-on experience with standard SBOM formats such as SPDX and CycloneDX. The ability to generate, ingest, and manage SBOMs from various third-party and native tools.
- Familiarity with OWASP standards, including OWASP GenAI Security, OWASP LLM Top 10, OWASP API Top 10, OWASP Top 10.
- Strong scripting or automation background (e.g., Python, Bash, Groovy, YAML).
- Strong foundational knowledge of networking concepts and protocols is mandatory for debugging connectivity issues within complex distributed systems.
- Working knowledge of at least one major cloud provider (AWS, Azure, or GCP) and experience troubleshooting cloud-based infrastructure.
- Soft Skills: Excellent verbal and written communication skills with a strong customer-centric approach.
- Problem-Solving: Strong analytical and debugging skills with a relentless drive to solve complex, ambiguous technical problems.
- Adaptability: Demonstrates strong adaptability and a proven ability to quickly grasp new technologies.
Nice to Have
- Experience working with AI and security products is a plus
Harness in the news:
- Harness AI Tackles Software Development’s Real Bottleneck
- After 'Vibe Coding' Comes 'Vibe Testing' (Almost)
- Startup Within a Startup: Empowering Intrapreneurs for Scalable Innovation - Jyoti Bansal (Harness)
- Jyoti Bansal, Harness | theCUBEd Awards
- Eight years after selling AppDynamics to Cisco, Jyoti Bansal is pursuing an unusual merger
- Harness snags Split.io, as it goes all in on feature flags and experiments
- Exclusive: Jyoti Bansal-led Harness has raised $150 million in debt financing
All qualified applicants will receive consideration for employment without regard to race, color, religion, sex or national origin.
Note on Fraudulent Recruiting/Offers
We have become aware that there may be fraudulent recruiting attempts being made by people posing as representatives of Harness. These scams may involve fake job postings, unsolicited emails, or messages claiming to be from our recruiters or hiring managers.
Please note, we do not ask for sensitive or financial information via chat, text, or social media, and any email communications will come from the domain @harness.io. Additionally, Harness will never ask for any payment, fee to be paid, or purchases to be made by a job applicant. All applicants are encouraged to apply directly to our open jobs via our website. Interviews are generally conducted via Zoom video conference unless the candidate requests other accommodations.
If you believe that you have been the target of an interview/offer scam by someone posing as a representative of Harness, please do not provide any personal or financial information and contact us immediately at security@harness.io. You can also find additional information about this type of scam and report any fraudulent employment offers via the Federal Trade Commission’s website (https://consumer.ftc.gov/articles/job-scams), or you can contact your local law enforcement agency.