Software Supply Chain Security Engineer

What you'll do

• Execute the software supply chain security strategy to deploy secure-by-default open source artifacts.
• Create and implement DevSecOps and AppSec principles and processes with engineering teams.
• Onboard application teams to security tools and troubleshoot platform integrations with vendors.
• Deliver and communicate security reporting via dashboards and metrics.
• Develop and maintain documentation for supply chain security and DevSecOps processes.
• Continuously improve DevSecOps and software supply chain security tools and processes.
• Provide technical support to complete project tasks based on specific objectives.

What we're looking for

• 6+ years of relevant combined experience across development, CI/CD, software supply chain security, and application security.
• Proven expertise in application security (AppSec) and software supply chain security implementation and governance.
• Experience with build and release management, secure software development lifecycle (SSDLC), and automating security processes within CI/CD pipelines.
• Experience managing artifact caches (e.g., JFrog Artifactory) and familiarity with package ecosystems like Maven Central and PyPI.
• Experience developing software in technologies such as Java, .Net, Python, and Node.js.
• Experience in cloud technologies such as Azure and AWS.
• Current information security certification, including CISSP (preferred).
• Security+ or other cybersecurity security certification (preferred).