Software Composition Senior Analyst

You have a clear vision of where your career can go. And we have the leadership to help you get there. At CNA, we strive to create a culture in which people know they matter and are part of something important, ensuring the abilities of all employees are used to their fullest potential.
CNA seeks to offer a comprehensive and competitive benefits package to our employees that helps them - and their family members - achieve their physical, financial, emotional and social wellbeing goals.
For a detailed look at CNA's benefits, check out our Candidate's Guide .
Software Composition Analysis (SCA) is the process of identifying and evaluating software components in a company's source code base. The software includes the company's intellectual property and third party components. The analysis includes evaluation of the software and components for code quality, security vulnerabilities and license compliance.
The Software Composition Analyst will be responsible for configuring source code intellectual property and preforming security vulnerabilities scanning process. Under minimal direction contributes to projects throughout multiple phases of the product lifecycle while utilizing source control, build scripts, automated testing, etc.
JOB DESCRIPTION:
Essential Duties & Responsibilities

• Research new software development technologies and concepts and make improvement suggestions.
• Build and maintain internal tools to streamline software development process and enhance productivity.
• Provide development estimates for enhancement requests.
• Understand and apply applicable design and coding standards.
• Build packages and deploy software to integration environments.
• Understand the needs of the client and create fast feedback loops to confirm the understanding.
• Act as the voice of the customer, identify opportunities, prioritize needs, communicate product messaging, and keep performance metrics

Skills, Knowledge & Abilities

• 1. Ability to drive managed service provider implementations, work closely with Operations, Infrastructure and Architecture to ensure implementations are optimized
• 2. Troubleshooting skills that spans multiple technologies, including Linux, Windows, Google Compute Platform (GCP), Git, SVN, Maven, etc.
• 3. Knowledge and understanding of IP licensing principles, open source compliance and other industry standard techniques and practices
• 4. Ability to communicate effectively with all levels of employees within scope of responsibility, including managers and development teams
• 5. Robust with at least one programming language such as HTML/JavaScript/CSS, Java Enterprise, Python, PHP, Go, C, etc.
• 6. Familiarity with automation and CI/CD pipelines, and the ability to modify a pipeline to ensure an application meets enterprise standards
• 7. Ability to effectively prioritize and execute tasks in a fast-paced environment
• 8. Ability to work with managed service providers, technology and business partners to move organization forward accord
• 9. Ability to interact with open source software projects, investigate issues, file bug reports and perform testing

Education & Experience

• Bachelor's degree, in a related discipline, or equivalent
• Typically a minimum of seven years of related work experience.
• 3+ years of enterprise software development experience
• 2+ years working with stakeholders, like development teams, business owners and management
• 2+ years interacting with executive teams, like GRC and Legal
• 2+ years working with open source projects
• 2+ years working with automation and CI/CD pipelines
• 3+ years of experience among several programming languages, including HTML/JavaScript/CSS, Java Enterprise, Visual Basic/C#/.Net, Python, Bash Scripting, Windows Shell Scripts, COBOL

#LI-JB1
#remote
CNA is committed to providing reasonable accommodations to qualified individuals with disabilities in the recruitment process. To request an accommodation, please contact [email protected] .