Software Supply Chain Security Engineer
State StreetBase Salary
$120k - $203k/yr
Responsibilities
- Execute the enterprise software supply chain security strategy and expand secure-by-default open-source artifact deployment.
- Partner with engineering leads to create, implement, and apply DevSecOps and AppSec principles and processes.
- Configure and manage artifact caches and artifact sources of truth at enterprise scale, including locking down artifact sourcing and continuous security assessment.
- Assist application teams with onboarding to adopted security tools and technologies and work with vendors to troubleshoot platform and integration issues.
- Deliver dashboards, reporting, and metrics; develop and maintain supply chain security and DevSecOps documentation.
- Continuously improve DevSecOps and software supply chain security processes and tools.
- Technically support projects and deliver tasks through completion based on project objectives.
Requirements
- 10+ years of relevant combined experience across software development, CI/CD, software supply chain security, and application security.
- Extensive experience developing and managing application and software supply chain security solutions, including artifact caches, artifact sourcing controls, and continuous security assessment.
- Hands-on experience with application security, build and release management, secure software development lifecycle practices, and security automation in CI/CD pipelines.
- Experience developing software with Java, .NET, Python, Node.js, or another common programming language.
- Experience with cloud technologies such as Azure and AWS.
- Deep familiarity with package ecosystems including Maven Central and PyPI, and familiarity with SLSA principles.
- Experience with application security tooling, modern CI/CD, DevSecOps practices, and partnering with development communities to drive adoption.
- Current information security certification, such as CISSP, and Security+ or another cybersecurity certification.
- Experience with automation and orchestration tools such as Ansible, Terraform, or Kubernetes is valuable.
- Knowledge of Infrastructure as Code principles and automation of deployment and management tasks in hybrid cloud environments is beneficial.
- Technical solutioning experience with DevOps, cloud engineering, system hardening, DevSecOps, cybersecurity, or cloud security.
- Strong verbal and written communication skills and the ability to manage multiple projects or priorities.
Benefits
- Salary range is $120,000-$202,500 annually, with the applicable range potentially differing outside the primary location.
- Retirement savings plan with company match, insurance coverage, paid time off, short-term disability, family care leave, and an Employee Assistance Program.
- Eligibility for incentive compensation and certain tax-advantaged savings plans.
- Inclusive development opportunities, flexible work-life support, paid volunteer days, and employee networks.
About State Street
At State Street, we deliver leading investment platforms, data, expertise, and solutions that accelerate performance and better decision making. With over 200 years of global financial leadership, we equip institutional investors through a comprehensive suite of capabilities: Investment Services: Integrated front-to-back solutions across custody, accounting, and operations. Investment Management: Index and active strategies from one of the world’s largest asset managers. Markets: Multi-asset trading, FX solutions, and data-driven research to enhance portfolio value. Who We Are • 50,000+ employees worldwide • Active in 100+ markets • #1 in ETF servicing What You’ll Find Here • Executive perspectives and thought leadership • Timely market commentary and macro insights • Our views on investment operations, ETFs, private markets, and digital finance • Stories reflecting our culture, values and commitment to diversity and inclusion