Senior Software Engineer, Information Security

Walmart•Herndon, VA

About The Position

Formulates technical problems using knowledge of analytics, big data, and automation techniques while understanding business requirements and established use cases. Translates and co-owns business problems within a specific discipline into data-related or mathematical solutions. Identifies and applies appropriate methods and tools to solve problems and demonstrates how these approaches address business challenges through relevant examples. Manages functional partnerships by identifying stakeholders, analyzing their technical needs, and engaging them through effective and culturally aware communication. Shares functional insights regularly with internal and external partners to build and maintain credibility. Explores existing products or solutions to address identified business or technical needs. Assesses gaps between current offerings and customer expectations, particularly in agile environments. Classifies requirements into applicable types, anticipates risks during the requirements phase, informs stakeholders, and recommends corrective actions. Contributes to the creation of user stories for components or applications based on evolving requirements. Monitors program progress by tracking metrics and ensuring adherence to approved milestones and timelines. Writes and configures efficient, scalable, and secure code that meets business and technical requirements. Selects and applies suitable programming languages, frameworks, and development tools. Creates scripts to automate repetitive tasks within CI/CD pipelines and testing workflows, implements telemetry features, and follows all required security policies during code development. Prepares and executes test cases aligned with customer requirements and testing objectives. Uses appropriate testing strategies and tools to detect and document defects in the code. Tracks and manages defects throughout their lifecycle, performs regression testing, and analyzes root causes to prevent repeated issues. Troubleshoots and resolves performance or availability issues across applications and components. Conducts ongoing maintenance procedures for applications, analyzes logs and performance data, and monitors system metrics to ensure optimal functionality. Performs debugging, re-engineering, and updates as needed. Evaluates change requests for feasibility and implements approved updates while ensuring system integration, performance, security, and accessibility remain intact.

Requirements

Bachelor’s degree or the equivalent in Computer Science, Information Technology, Engineering, or related field plus 3 years of experience in software engineering or related experience; OR 5 years of experience in software engineering or related experience.
Must have experience with: Conducting Risk Assessments for vendors and internal markets
Applying NIST Cyber Security Framework, NIST SP 800-53 security control requirements in risk assessments
Conducting ISO 27001 Certificate and Statement of Applicability reviews
Conducting SOC 2 Type 2 document reviews
Assessing Data Loss Prevention (DLP) controls for vendors during risk assessments
Assessing vendor security posture including privacy controls such as General Data Protection Regulations (GDPR) compliance
Defining Risk Assessment questionnaire based on SIG Lite
Utilizing Microsoft Excel for reporting and Microsoft Visio for creating internal process flow diagrams
Utilizing SharePoint and OneDrive for assessment reports and artifact repository
Coding in an object-oriented programming language (Python) for creating automation scripts
Creating Tableau dashboards to present metrics.

Responsibilities

Formulates technical problems using knowledge of analytics, big data, and automation techniques while understanding business requirements and established use cases.
Translates and co-owns business problems within a specific discipline into data-related or mathematical solutions.
Identifies and applies appropriate methods and tools to solve problems and demonstrates how these approaches address business challenges through relevant examples.
Manages functional partnerships by identifying stakeholders, analyzing their technical needs, and engaging them through effective and culturally aware communication.
Shares functional insights regularly with internal and external partners to build and maintain credibility.
Explores existing products or solutions to address identified business or technical needs.
Assesses gaps between current offerings and customer expectations, particularly in agile environments.
Classifies requirements into applicable types, anticipates risks during the requirements phase, informs stakeholders, and recommends corrective actions.
Contributes to the creation of user stories for components or applications based on evolving requirements.
Monitors program progress by tracking metrics and ensuring adherence to approved milestones and timelines.
Writes and configures efficient, scalable, and secure code that meets business and technical requirements.
Selects and applies suitable programming languages, frameworks, and development tools.
Creates scripts to automate repetitive tasks within CI/CD pipelines and testing workflows, implements telemetry features, and follows all required security policies during code development.
Prepares and executes test cases aligned with customer requirements and testing objectives.
Uses appropriate testing strategies and tools to detect and document defects in the code.
Tracks and manages defects throughout their lifecycle, performs regression testing, and analyzes root causes to prevent repeated issues.
Troubleshoots and resolves performance or availability issues across applications and components.
Conducts ongoing maintenance procedures for applications, analyzes logs and performance data, and monitors system metrics to ensure optimal functionality.
Performs debugging, re-engineering, and updates as needed.
Evaluates change requests for feasibility and implements approved updates while ensuring system integration, performance, security, and accessibility remain intact.