Job Description
Key Skills Required
Master these to land this role
Want to know if you're a match for this job?
Sonatype is the software supply chain security company. We provide the world’s best end-to-end software supply chain security solution, combining the only proactive protection against malicious open source, the only enterprise grade SBOM management and the leading open source dependency management platform. This empowers enterprises to create and maintain secure, quality, and innovative software at scale.
As founders of Nexus Repository and stewards of Maven Central, the world’s largest repository of Java open-source software, we are software pioneers and our open source expertise is unmatched. We empower innovation with an unparalleled commitment to build faster, safer software and harness AI and data intelligence to mitigate risk, maximize efficiencies, and drive powerful software development.
More than 2,000 organizations, including 70% of the Fortune 100 and 15 million software developers, rely on Sonatype to optimize their software supply chains.
What you'll do:
- Build and maintain reliable data pipelines and ETL/ELT workflows
- Develop and optimize data models for analytics and internal tools
- Work with team members to deliver clean, trusted datasets
- Support core data platform tools like Spark and AWS (S3, SNS, SQS, ECS/Fargate, EMR)
- Monitor data pipelines for quality, performance, and reliability
- Write clear documentation and contribute to test coverage and CI/CD processes
- Help shape our data lakehouse architecture and platform roadmap
What you'll bring:
- Bachelor's degree in Computer Science, Engineering, or a related field, or equivalent practical experience
- 2–4 years of experience in data engineering or a backend data-related role
- Strong skills in Java, Scala, or another backend programming language
- Python (PySpark/pandas) skills
- Experience with SQL and distributed data systems (e.g., Spark, Kafka, SQS)
- Familiarity with NoSQL stores like Cassandra, HBase, or similar
- Understanding of data modeling for analytics and reporting
- Proficient in English with strong communication skills — able to explain or demo work to non-engineers
- Self-driven — picks up new technologies and frameworks with little guidance
- Debugs methodically; breaks complex problems into smaller steps
- Open to feedback — iterates and improves through code reviews
- Uses AI-assisted engineering tools (Claude Code, Codex, Cursor, etc.) as part of daily workflow
- Reliable internet connection to sustain video, audio, and screen sharing
It'd be great if you had:
- Experience with dbt, Databricks, or real-time data pipelines
- Familiarity with cloud infrastructure tools like Terraform or CloudFormation
- Interest in data governance, ML pipelines, or compliance standards
- Personal projects or open source contributions demonstrating initiative
Why you'll love working here:
- Work on data that supports meaningful software security outcomes
- Modern tools in a cloud-first, open-source-friendly environment
- A team that values clarity, learning, and autonomy
How would you rate this job post?
See what other professionals think about this role.
Similar Opportunities
More Openings at Sonatype
Explore Top Companies in this Space
Apiiro
Application Security Posture Management (ASPM) / Software Supply Chain Security (SSCS) / DevSecOps Cloud Security Automation
ArmorCode
Application Security Posture Management (ASPM) / Agentic AI Unified Exposure Management / Software Supply Chain & DevSecOps Governance
M7 Health
Healthcare / Enterprise Software / AI / Workforce Management
Accurant
Climate Tech / Venture Capital / Business Consulting / Clean Energy
Sonatype
View Company ProfileSonatype is a pioneering developer security and software supply chain management platform that empowers engineering and DevSecOps teams to automate open-source governance and secure their software development lifecycles. Founded in 2008 by Jason van Zyl—the creator of Apache Maven—and Brian Fox, the company originated from the development of Maven Central, the world's largest repository of Java components. Sonatype leverages deep intelligence and AI-powered automation to analyze open-source software (OSS) dependencies, identifying code vulnerabilities, license compliance risks, and malicious software before deployment. Its core product suite, led by the Nexus Platform—including Nexus Repository, Nexus Lifecycle, and Nexus Firewall—provides end-to-end visibility and continuous enforcement across CI/CD pipelines. Headquartered in Fulton, Maryland, Sonatype serves thousands of global enterprises, including major banks, technology firms, and government agencies, helping them accelerate software delivery without compromising safety or security.
Safety First
- Never pay for a job application.
- Do not share sensitive bank info.
- Verify the client before starting work.