Security Software Developer

Sungrow USA Corporation

18h•Remote

About The Position

Sungrow Americas is seeking a Security Software Developer to design, build, and maintain internal platforms that enable scalable, integrated cybersecurity operations across the organization. This role focuses on developing secure, reliable systems and integrations that support key cybersecurity workflows across the product and enterprise lifecycle. You will work closely with cross-functional teams—including product security, engineering, Service, GRC, and IT to deliver solutions that improve visibility, consistency, and operational efficiency. This is a high-impact development role with clear ownership, aligned to prioritized initiatives within the cybersecurity roadmap.

Requirements

6–10+ years of experience in software engineering, with exposure to cybersecurity or security tooling environments
Strong proficiency in programming languages (e.g., C, C++, Python, Go, Java, or similar)
Experience building:
APIs and backend services
System integrations and automation workflows
Familiarity with:
CI/CD pipelines
Cloud-based architectures and microservices
Working knowledge of secure software development practices
Ability to translate complex requirements into scalable technical solutions

Nice To Haves

Experience building internal platforms for security, risk, or compliance functions
Familiarity with DevSecOps environments and tooling ecosystems
Experience with data pipelines, dashboards, or reporting systems
Exposure to product security, GRC, or security operations workflows
Background in energy, industrial, or regulated environments

Responsibilities

Security Platform Development
Design and develop internal platforms and services that support:
Vulnerability and remediation tracking
Secure development lifecycle (SDLC) processes
Risk and control mapping
Audit and evidence management
Build systems that provide structured visibility and traceability across security processes
Integration & Automation
Develop and maintain integrations across:
CI/CD pipelines
Security tooling (e.g., SAST, DAST, SCA)
Workflow and ticketing systems
Automate data collection, process execution, and reporting through API-driven solutions
Improve consistency and scalability of existing security workflows
Cross-Functional Collaboration
Partner with:
Product Security and Service
Application and firmware development teams
GRC and Security Operations
IT and enterprise engineering
Translate business and security requirements into technical system designs and implementations
Support consistent execution across multiple teams and environments
Data & Reporting Enablement
Build and maintain systems that support:
Security metrics and KPIs
Program-level dashboards
Audit-ready reporting
Ensure data integrity, accessibility, and alignment across platforms
Secure Engineering Practices
Apply secure coding standards and design principles
Implement appropriate controls for:
Authentication and authorization
Data protection and access management
Ensure developed systems meet internal security and compliance expectations
Lifecycle Ownership
Own the lifecycle of developed systems:
Design → build → deploy → maintain → enhance
Continuously improve performance, reliability, and scalability
Align platform capabilities with evolving cybersecurity and business needs