AI / Data Engineer - Software Supply Chain Security

Job Description

Job Description

Company Description

Join Oteemo and become part of a transformation powerhouse where innovation meets impact. We're not just another consulting firm—we're architects of digital evolution, blending cutting-edge technical expertise with human-centered design principles to create solutions that resonate. Our work spans Infrastructure, Software Development, DevSecOps, Cybersecurity, Experience and Design, Organizational Change Management, and AI-enabled solutions, but our approach is what truly sets us apart. We measure success through tangible business outcomes, not billable hours. We foster a culture of continuous learning where your ideas can thrive and technical excellence is celebrated. Our collaborative global team works across borders and time zones, tackling complex challenges for both Commercial Enterprise and Federal Defense clients with equal passion and precision. At Oteemo, you'll have the opportunity to work with emerging technologies and develop your skills alongside industry experts who are reshaping digital landscapes. If you're seeking a place where your technical prowess can drive meaningful change and where innovation isn't just encouraged—it's expected—Oteemo is your next career destination.

Job Description

We are looking for an engineer who can apply AI, data analysis, and automation to secure the software supply chain. This is not a “train a model” research role — it’s a practical, hands-on position where you’ll use LLMs, analytics, and automation to detect risks, prioritize fixes, and harden systems ranging from container images to package dependencies. You will turn messy vulnerability and SBOM data into clear, actionable security improvements.

Responsibilities :

• Build and optimize pipelines that use SBOMs, CVE data, and AI / ML to assess and harden software components.
• Apply AI / ML techniques to prioritize vulnerabilities, suggest fixes, and detect high-risk patterns across large dependency sets.
• Automate ingestion and normalization of advisories, scanner output, and vendor data for security decision-making.
• Experiment with LLMs to reduce manual triage, generate draft remediation guidance, and summarize vendor notices.
• Provide data-driven recommendations for securing containers, AMIs, ISOs, packages, and third-party dependencies.
• Develop dashboards and metrics (e.g., risk scores, patch coverage, remediation timelines) for engineering and leadership.
• Document workflows and enable other teams to use AI / automation in supply chain security.

Qualifications

Nice to Have

Additional Information

We Value :

What we offer :

Oteemo is an equal employment and affirmative action employer. We evaluate qualified applicants on merit and business needs and not on race, color, religion, creed, gender, sexual orientation, national origin, ancestry, age, disability, genetic information, marital status, veteran status or any other factor protected by law. Oteemo complies with the law regarding reasonable accommodations for handicapped and disabled employees.