Software Supply Chain Security Engineer

State Street

Confirmed live yesterday Trusted

Quick summary

Work type
On-site
Location
Quincy, MA
Employment
Full-time
Posted
54 days ago
Freshness
Confirmed live yesterday
Nearby
99+ roles within 25 mi

Market check

Salary context

How this pay compares to similar roles

Similar $182k
$131k $229k
below market most similar roles pay here above market

This listing doesn't post a salary. Most similar roles pay $147,500–$216,300.

Based on 240 similar postings.

Employer

About State Street

State Street Corporation is one of the world''s largest custodian banks and asset managers, providing investment servicing, investment management, and investment research to institutional investors. Industry: Financial Services & Asset Custody

State Street currently has 351 open roles on FindRole.

Listed pay typically runs $115,000–$195,944 across 199 roles with salary data.

Most-posted roles

View all roles at State Street

At a glance

TL;DR · Software Supply Chain Security Engineer

Role Posting Log in to save

The Software Supply Chain Security Engineer joins the Cyber Security Architecture & Engineering team to execute a software supply chain security strategy. This role involves implementing DevSecOps and AppSec principles, automating security processes within CI/CD pipelines, and managing artifact caches like JFrog Artifactory. You will partner with engineering leads to onboard teams to security tools, troubleshoot platform integrations, and develop documentation for supply chain security. The position requires expertise in Java, .Net, Python, and Node.js, alongside experience with Azure, AWS, Ansible, Terraform, and Kubernetes. You will address technical problems related to locking down artifact sourcing, continuous security assessment, and SLSA principles. The work focuses on deploying secure-by-default open source artifacts and hardening systems within a hybrid cloud environment using Infrastructure as Code.

Skills

AppSec DevSecOps Software Supply Chain Security CI/CD Java Python .Net Node.js AWS Azure Kubernetes Terraform Ansible JFrog Artifactory Infrastructure as Code Maven Central PyPI SLSA SSDLC

What you'll do

  • Execute the software supply chain security strategy to deploy secure-by-default open source artifacts.
  • Implement DevSecOps and AppSec principles and processes in partnership with Engineering team leads.
  • Onboard application teams to security tools and troubleshoot platform integrations with vendors.
  • Deliver and communicate security reporting via dashboards and metrics.
  • Develop and maintain comprehensive supply chain security and DevSecOps documentation.
  • Continuously improve DevSecOps and software supply chain security tools and processes.
  • Manage artifact caches and lock down artifact sourcing at an enterprise scale.

What we're looking for

  • 10+ years of relevant combined experience across development, CI/CD, software supply chain security, and application security.
  • Proven expertise in application security (AppSec) and software supply chain security implementation and governance.
  • Experience in build and release management, secure software development lifecycle (SSDLC), and automating security processes within CI/CD pipelines.
  • Experience configuring and managing artifact caches like JFrog Artifactory and familiarity with Maven Central, PyPI, and SLSA principles.
  • Experience developing software in technologies such as Java, .Net, Python, and Node.js.
  • Experience in cloud technologies such as Azure and AWS.
  • Current information security certification, including CISSP.
  • Security+ or other cybersecurity security certification (preferred).

Related searches

More Software Supply Chain Security Engineer jobs Software Supply Chain Security Engineer jobs in Quincy All jobs at State Street

More like this

Similar roles

Software Supply Chain Security Engineer

State Street

Quincy, MA +4 54 days ago
AppSec DevSecOps Software Supply Chain Security CI/CD Java .Net Python Node.js AWS Azure Kubernetes Terraform Ansible JFrog Artifactory Maven Central PyPI SLSA Infrastructure as Code SSDLC
6+ yrs exp
Save

Software Supply Chain Security Engineer

State Street

Quincy, MA +3 91 days ago
AppSec DevSecOps Software Supply Chain Security CI/CD Java .Net Python Node.js AWS Azure Kubernetes Terraform Ansible JFrog Artifactory Infrastructure as Code Maven Central PyPI SLSA SSDLC
6+ yrs exp
Save

Application Security Engineer

State Street

Quincy, MA +4 60 days ago
DevSecOps AppSec CI/CD SAST DAST SCA Python Java .Net Node.js AWS Azure Kubernetes Terraform Ansible Infrastructure as Code Agile API Security Container Security SSDLC
6+ yrs exp
Save

Application Security Engineer

State Street

Quincy, MA 21 days ago $90,000–$157,500
DevSecOps AppSec CI/CD SAST SCA DAST Container Security Java .Net Python Node.js AWS Azure Terraform Kubernetes Ansible Infrastructure as Code Agile SSDLC Cloud Security System Hardening
6+ yrs exp
Save

Application Security Engineer

State Street

Quincy, MA +3 91 days ago
Application Security DevSecOps Application Detection and Response SAST DAST SCA RASP WAAP API Security AWS Azure Kubernetes Terraform Ansible Python Java .NET Node.js CI/CD Infrastructure as Code OWASP Top 10 Incident Response Agile
6+ yrs exp
Save