Supply Chain Security Lead

State Street

Confirmed live 2 days ago Trusted

Quick summary

Work type
On-site
Location
Quincy, MA
Salary
$120,000–$217,500 / yr
Posted
45 days ago
Freshness
Confirmed live 2 days ago

Market check

Salary context

Competitive pay

How this pay compares to similar roles

Similar $181k
This role $169k
$108k most similar roles pay here $229k

This role pays less than 56% of similar roles. Most pay $152,300–$209,500 — the shaded band above. At the midpoint, this role pays about $169k versus about $181k for comparable roles.

Based on 240 similar postings.

Employer

About State Street

State Street Corporation is one of the world''s largest custodian banks and asset managers, providing investment servicing, investment management, and investment research to institutional investors. Industry: Financial Services & Asset Custody

State Street currently has 176 open roles on FindRole.

Listed pay typically runs $120,000–$202,500 across 172 roles with salary data.

Most-posted roles

View all roles at State Street

At a glance

TL;DR · Supply Chain Security Lead

The Supply Chain Security Lead joins the Cyber Security Architecture & Engineering team to lead and grow the Software Supply Chain Security function. This role focuses on building and executing a security strategy for deploying secure-by-default open source artifacts across the enterprise. The successful candidate will partner with engineering leads to implement DevSecOps and AppSec principles, while establishing governance for software bill of materials, artifact integrity, code provenance, and policy-as-code guardrails. Day-to-day responsibilities include developing documentation, delivering metrics via dashboards, and managing automated CI/CD pipelines. Required expertise includes experience with Java, .Net, Python, Node.js, Azure, and AWS. The role requires proficiency in JFrog Artifactory, Maven Central, PyPI, SLSA principles, and automation tools like Ansible, Terraform, or Kubernetes to secure the software supply chain ecosystem within a hybrid cloud environment.

What you'll do

  • Execute the enterprise software supply chain security strategy for secure open source artifacts.
  • Lead and grow the internal Software Supply Chain Security team.
  • Implement DevSecOps and AppSec principles in partnership with Engineering teams.
  • Establish governance for SBOM, artifact integrity, code provenance, and policy-as-code guardrails.
  • Manage and secure artifact caches and sources of truth at an enterprise scale.
  • Develop and maintain technical documentation for supply chain security and DevSecOps processes.
  • Deliver security metrics and reporting via automated dashboards.
  • Automate security processes within CI/CD pipelines using modern tooling.

What we're looking for

  • 10+ years of relevant combined experience across development, CI/CD, software supply chain security, and application security.
  • Proven expertise in AppSec and software supply chain security implementation and governance.
  • Experience with secure software development lifecycle (SSDLC) and automating security processes within CI/CD pipelines.
  • Experience managing artifact caches like JFrog Artifactory and familiarity with Maven Central, PyPI, and SLSA principles.
  • Proficiency in programming languages such as Java, .Net, Python, or Node.js.
  • Experience with cloud technologies including Azure and AWS.
  • Knowledge of automation tools such as Ansible, Terraform, Kubernetes, and Infrastructure as Code (IaC).
  • Possession of a current information security certification, such as CISSP or Security+.

More like this

Similar roles

Software Supply Chain Security Engineer

State Street

Quincy, MA 8 days ago $120,000$202,500
AppSec DevSecOps CI/CD Software Supply Chain Security JFrog Artifactory Maven Central PyPI SLSA Java Python .Net Node.js AWS Azure Ansible Terraform Kubernetes Infrastructure as Code Agile
10+ yrs exp

Software Supply Chain Security Engineer

State Street

Quincy, MA +3 45 days ago $90,000$157,500
AppSec DevSecOps Software Supply Chain Security CI/CD JFrog Artifactory Maven Central PyPI SLSA Java Python .Net Node.js AWS Azure Ansible Terraform Kubernetes Infrastructure as Code Agile
6+ yrs exp

Application Security Engineer

State Street

Quincy, MA +4 14 days ago $120,000$202,500
AppSec DevSecOps SAST DAST SCA CI/CD Python Java .Net Node.js AWS Azure Kubernetes Terraform Ansible Infrastructure as Code Agile SDLC API Security Container Scanning
6+ yrs exp

Application Security Engineer

State Street

Quincy, MA 45 days ago $100,000$167,500
AppSec DevSecOps SAST SCA DAST CI/CD Python Java .Net Node.js AWS Azure Kubernetes Terraform Ansible Infrastructure as Code Agile SDLC Container Security
6+ yrs exp

Application Security Engineer

State Street

Quincy, MA +3 45 days ago $120,000$202,500
AppSec ADR DevSecOps SAST DAST SCA RASP WAAP API Security OWASP Top 10 Java Python .NET Node.js AWS Azure Ansible Terraform Kubernetes CI/CD Infrastructure as Code
6+ yrs exp