DevSecOps Research Engineer

We have an exciting opportunity for a DevSecOps Research Engineer at UL Research Institutes.

The DevSecOps Research Engineer will perform research and engineering in software development, security, and operations that help the Digital Safety Research Institute (DSRI) build secure, scalable, and efficient software systems and advance the state of the art. The DevSecOps Engineer will integrate security and other digital safety measures into the software development process, automate security and privacy controls, and continuously monitor for vulnerabilities and threats. The DevSecOps Engineer collaborates with development, operations, and security teams, ensuring compliance with regulations and industry best practices.

Underwriters Laboratories

At UL Research Institutes (UL), we wake up every day with a common purpose: to make the world a safer, more secure and sustainable place. Science is in our DNA; we are endlessly curious and passionate about seeking and speaking the truth. We take delight in knowing that our work makes a meaningful contribution to society, and we are proud that our culture is centered on integrity, collaboration, inclusion and excellence. UL stands at the forefront of technological advancement, and we are continually challenged to find new ways to foster innovation and positive change. Satisfying? Yes. Exciting? Absolutely!

Essential Functions, Roles, and Responsibilities

• Responsible for researching, engineering, and integrating security and digital safety measures into the software development process, working with the development teams to ensure that digital safety requirements are met throughout the software development lifecycle.
• Automate the deployment and configuration of security and digital safety measures to ensure consistent implementation across environments and automate the testing of digital safety controls to detect and fix vulnerabilities in a timely manner.
• Create open-source DevSecOps tooling to allow other industries to integrate security and other digital safety measures into their continuous integration and deployment systems.
• Monitor the software system for security and digital safety vulnerabilities and threats.
• Use tools and techniques such as threat modeling, vulnerability scanning, penetration testing, AI testing, and dark pattern detection to identify and address risks.
• Collaborate with development, operations, and security teams to ensure that security and digital safety is a priority throughout the software development lifecycle.
• Ensure that the software system meets relevant security, privacy, and AI/SW ethics standards and regulations.
• Share ideas for digital safety best practices with the larger academia and the digital ecosystem.
• Troubleshoots security-related issues in the software system and work with development and operations teams to identify the root cause of security incidents and implement appropriate solutions.
• Contribute to and/or lead other department specific and cross-functional initiatives.

While no one candidate will embody every quality, the successful candidate will bring many of the following professional competencies and personal attributes:

Professional Competencies

• Demonstrated experience in DevOps engineering.
• Proficiency with Git and GitHub workflows.
• Strong knowledge of Ruby or Python.
• Working knowledge of databases and software/AI development practices.
• Expert technical and/or IT development experience.
• Problem solving skills with the ability to identify root causes, develop practical solutions, and work in collaboration with colleagues across the organization to address strategic, operational, and any other roadblocks to success.
• Excellent communication skills both written and verbal.
• Positive and collaborative attitude and interpersonal skills to work effectively with leaders and colleagues across the organization.

Experience and Education Requirements

• Bachelor’s degree in computer science, engineering, or a related field.
• Experience in developing software engineering platforms and applications.

• Mission: For UL, corporate and social responsibility isn’t new. Making the world a safer, more secure and sustainable place has been our business model for the last 128 years and is deeply ingrained in everything we do.
• People: Ask any UL employee what they love most about working here, and you’ll almost always hear, “the people.” Going beyond what is possible is the standard at UL. We’re able to deliver the best because we employ the best.
• Interesting work: Every day is different for us here as we eagerly anticipate the next innovation that our customers’ create. We’re inspired to take on the challenge that will transform how people live, work and play. And as a global company, in many roles, you will get international experience working with colleagues around the world.
• Grow & achieve: We learn, work and grow together with targeted development, reward and recognition programs as well as our very own UL University that offers extensive training programs for employees at all stages, including a technical training track for applicable roles.
• Total Rewards: All employees at UL Research Institutes and UL Standards & Engagementare eligible for bonus compensation. We offer comprehensive medical, dental, vision, and life insurance plans. a generous 401k matching structure of up to 5% of eligible pay. Additionally, we invest an additional 4% into your retirement saving fund after your first year of continuous employment. Depending on your role, you can work with your manager on flexible working arrangements. We also provide employees with paid time off including vacation, holiday, sick and volunteer time off.

About UL Research Institutes 

UL Research Institutes is a nonprofit organization dedicated to advancing safety science research through the discovery and application of scientific knowledge. We conduct rigorous independent research and analyze safety data, convene experts worldwide to address risks, share knowledge through safety education and public outreach initiatives, and develop standards to guide safe commercialization of evolving technologies. We foster communities of safety, from grassroots initiatives for neighborhoods to summits of world leaders. Our organization employs collaborative and scientific approaches with partners and stakeholders to drive innovation and progress toward improving safety, security, and sustainability, ultimately enhancing societal well-being.

Our wholly owned subsidiary, UL Solutions, advances our shared public safety mission. We fund our work through grants, the licensing of standards documents and the business activities of UL Solutions, which conducts testing, verification and certification, and provides training and advisory services, along with data-driven reporting and decision-making tools for customers around the world.

To learn more, visit https://ulse.org