Software Supply Chain Security Engineer
State StreetBase Salary
$100k - $168k/yr
Responsibilities
- Execute the software supply chain security strategy for secure-by-default open-source artifacts across the enterprise.
- Partner with engineering leads to implement and apply DevSecOps, AppSec, and software supply chain security processes.
- Help application teams onboard to adopted security tools and technologies and troubleshoot integrations with vendors.
- Configure and manage enterprise-scale artifact caches and artifact sources of truth.
- Deliver security reporting through dashboards and metrics.
- Develop and maintain DevSecOps and software supply chain security documentation.
- Continuously improve DevSecOps, application security, software supply chain security processes, and tools.
- Provide technical support for projects through completion and deliver tasks aligned with project objectives.
Requirements
- At least 6 years of relevant combined experience across software development, CI/CD, software supply chain security, and application security.
- Extensive experience developing and managing application and software supply chain security solutions, including artifact caches, artifact sourcing controls, and continuous security assessment.
- Hands-on experience with application security, build and release management, SSDLC, CI/CD security automation, and DevSecOps practices.
- Experience with programming languages such as Java, .Net, Python, or Node.js.
- Experience with cloud technologies such as Azure and AWS.
- Experience with application security tooling and operations in modern CI/CD environments.
- Experience partnering with development teams to influence adoption of application security best practices and tooling.
- Current information security certification such as CISSP, Security+, or another cybersecurity certification.
- Experience with Ansible, Terraform, or Kubernetes is valuable.
- Knowledge of Infrastructure as Code principles and hybrid-cloud deployment and management automation is beneficial.
- Familiarity with Maven Central, PyPI, SLSA principles, and enterprise artifact management.
- Strong technical solutioning, verbal communication, written communication, prioritization, and project management skills.
Benefits
- Retirement savings plan with 401K company match.
- Insurance coverage including basic life, medical, dental, vision, long-term disability, and optional additional coverages.
- Paid time off including vacation, sick leave, short-term disability, and family care responsibilities.
- Employee Assistance Program access.
- Eligibility for incentive compensation and certain tax-advantaged savings plans.
- Inclusive development opportunities, flexible work-life support, paid volunteer days, and employee networks.
About State Street
At State Street, we deliver leading investment platforms, data, expertise, and solutions that accelerate performance and better decision making. With over 200 years of global financial leadership, we equip institutional investors through a comprehensive suite of capabilities: Investment Services: Integrated front-to-back solutions across custody, accounting, and operations. Investment Management: Index and active strategies from one of the world’s largest asset managers. Markets: Multi-asset trading, FX solutions, and data-driven research to enhance portfolio value. Who We Are • 50,000+ employees worldwide • Active in 100+ markets • #1 in ETF servicing What You’ll Find Here • Executive perspectives and thought leadership • Timely market commentary and macro insights • Our views on investment operations, ETFs, private markets, and digital finance • Stories reflecting our culture, values and commitment to diversity and inclusion