Full-Time

Associate Engineer

Lifecycle / Firewall

Posted on 7/19/2023

Sonatype

Sonatype

501-1,000 employees

Manages and secures open-source software usage

No salary listed

Entry, Junior

Remote

Category
Software Engineering
Required Skills
JavaScript
Java
HTML/CSS
Requirements
  • You have 0 to 2 years of work experience related to software development
  • Have an understanding of Java
  • You are familiar with front-end development, such as JavaScript, HTML, and CSS
  • You are familiar with relational databases
  • Basic knowledge of SaaS and cloud technologies
  • Passionate about lifelong learning
  • Reside in Colombia
Responsibilities
  • You have foundational knowledge in software engineering and would like to expand your skill set in quality, testing, debugging, design, and security
  • You are motivated by the opportunity to contribute to improving the Software Supply Chain
  • You will be a member of the Sonatype Lifecycle or Sonatype Repository Firewall
  • You will collaborate with your primary team on projects and other Sonatype product teams

Sonatype helps organizations manage and secure their use of open-source software, which is software that anyone can inspect and modify. Their main product, the Nexus Platform, automates DevOps processes and governs the usage of open-source software. This platform is designed to streamline the software development lifecycle, allowing for faster and more efficient software delivery. Sonatype differentiates itself from competitors by offering both free and paid versions of their products, catering to a wide range of clients, including IT leaders and developers across various industries like healthcare. Their goal is to ensure that organizations can develop high-quality and secure software by providing tools that identify security defects and manage risks throughout the software development process.

Company Size

501-1,000

Company Stage

Growth Equity (Venture Capital)

Total Funding

$154.7M

Headquarters

Fulton, Missouri

Founded

2008

Simplify Jobs

Simplify's Take

What believers are saying

  • AI-generated code increases demand for Sonatype's source code analysis tools.
  • Partnership with OpenText enhances market position with comprehensive security solutions.
  • Availability in AWS Marketplace streamlines purchase and management for AWS users.

What critics are saying

  • AI-generated code may lead to security vulnerabilities if not managed properly.
  • Software supply chain complexity leaves many vulnerabilities unaddressed.
  • Integration with AWS Marketplace exposes Sonatype to increased competition.

What makes Sonatype unique

  • Sonatype offers a full-spectrum software supply chain management platform.
  • The Nexus Platform automates DevOps processes and governs open-source software usage.
  • Sonatype's solutions are trusted by 15 million developers globally.

Help us improve and share your feedback! Did you find this helpful?

Benefits

Distributed Workforce - Walls don’t make a company great, people do — and we have the best. While we have offices in the US in Maryland and Virginia, and also in London and Sydney, our growing and talented team lives and works anywhere and everywhere.

Mission Driven - We’re helping software developers harness the power of open source, while making software safer. What does that mean for you? An opportunity to join a smart, mission-oriented team that is changing how software is made.

Competitive Salary & Benefits - We believe in taking care of our team. That means more than just interesting work — it's great benefits, competitive compensation packages, flexible schedules, and an endless opportunity to learn and grow.

Open, Transparent, Diverse - Our varied experiences, locations, ethnicities, genders, and sexual orientations, make us a better company. That's why we're committed to bringing different backgrounds and perspectives into our organization.

Growth & Insights and Company News

Headcount

6 month growth

4%

1 year growth

4%

2 year growth

4%
VentureBeat
Mar 14th, 2025
The Risks Of Ai-Generated Code Are Real — Here’S How Enterprises Can Manage The Risk

Join our daily and weekly newsletters for the latest updates and exclusive content on industry-leading AI coverage. Learn MoreNot that long ago, humans wrote almost all application code. But that’s no longer the case: The use of AI tools to write code has expanded dramatically. Some experts, such as Anthropic CEO Dario Amodei, expect that AI will write 90% of all code within the next 6 months.Against that backdrop, what is the impact for enterprises? Code development practices have traditionally involved various levels of control, oversight and governance to help ensure quality, compliance and security. With AI-developed code, do organizations have the same assurances? Even more importantly, perhaps, organizations must know which models generated their AI code.Understanding where code comes from is not a new challenge for enterprises. That’s where source code analysis (SCA) tools fit in

Say Hey Girl
Jan 11th, 2025
एकब | टक | मनह | कररह | When those fieldsएकब | ट क | म नह | कर रह | can get really small and tight.

SEE ALSO: Everything you need to know about the massive Equifax data breach Since the breach.एकब | टक | मनह | कररह | Sonatype announced that the company would be partnering with Equifax in order to help the credit reporting agency prevent future breaches.एकब | ट क | म नह | कर रह

GlobeNewswire
Nov 20th, 2024
Sonatype And Opentext Partner To Provide Integrated Vulnerability Management Platform For Open Source And Custom Code

Fulton, Md., Nov. 20, 2024 (GLOBE NEWSWIRE) -- Sonatype®, the end-to-end software supply chain security platform, and OpenTextTM (NASDAQ: OTEX) are partnering to offer a single integrated solution that combines open-source and custom code security, making finding and fixing vulnerabilities faster than ever. Together, Sonatype’s industry-leading Software Composition Analysis (SCA) solutions and Static and Dynamic Application Security Testing (SAST/DAST) from Fortify by OpenText offer a comprehensive, integrated security solution spanning the entire software development lifecycle. Sonatype’s 2024 State of the Software Supply Chain® Report found that in 2024, some critical vulnerabilities took more than 500 days to fix. By combining Sonatype’s open source governance with Fortify’s advanced application security testing, organizations can detect, prevent, and remediate vulnerabilities with maximum efficiency. Enterprises leveraging this integrated solution experience:  End-to-end software supply chain security: Robust protection for both open source and proprietary code, ensuring comprehensive coverage across the entire application stack from the first line of code to production

Sonatype
Nov 13th, 2024
Sonatype Named a Leader in Software Composition Analysis (SCA) Software Report by Independent Research Firm

Sonatype named a leader in software composition analysis (SCA) software report by independent research firm.

Sonatype
Sep 24th, 2024
SBOM-a-Rama Fall 2024: Sonatype's top 5 takeaways

Sonatype and other leaders in the field are actively working on technology to automate and streamline SBOM exchange, addressing these pain points and ensuring smoother, more efficient workflows.

INACTIVE