Software Supply Chain Security Engineer
State StreetBase Salary
$90k - $158k/yr
Responsibilities
- Execute the enterprise software supply chain security strategy and expand secure-by-default use of open source artifacts.
- Partner with engineering leads to implement and apply AppSec and DevSecOps principles and processes.
- Help application teams onboard to adopted security tools and technologies and troubleshoot vendor integrations.
- Configure and manage artifact caches, artifact sources of truth, artifact sourcing controls, and continuous security assessments.
- Deliver dashboards, reporting, and metrics related to software supply chain security.
- Develop and maintain DevSecOps and software supply chain security documentation.
- Continuously improve DevSecOps and software supply chain security processes and tools.
- Technically support projects and deliver tasks through project completion.
Requirements
- At least 6 years of combined relevant experience across software development, CI/CD, software supply chain security, and application security.
- Extensive experience developing and managing application and software supply chain security solutions at enterprise scale.
- Hands-on experience with application security, build and release management, SSDLC, and security-process automation in CI/CD pipelines.
- Experience configuring and managing artifact caches such as JFrog Artifactory and familiarity with Maven Central, PyPI, and SLSA principles.
- Experience developing software with Java, .NET, Python, Node.js, or another common programming language.
- Experience with cloud technologies such as Azure and AWS.
- Experience with application security tooling, modern CI/CD, DevSecOps practices, and partnering with development teams to influence adoption.
- Current information security or cybersecurity certification, such as CISSP or Security+.
- Experience with Ansible, Terraform, or Kubernetes is valuable.
- Knowledge of Infrastructure as Code principles and automation of deployment and management tasks in hybrid cloud environments is beneficial.
- Strong technical solutioning, communication, prioritization, and project-management skills.
Benefits
- Retirement savings plan with 401(k) company match.
- Insurance coverage including basic life, medical, dental, vision, long-term disability, and optional additional coverages.
- Paid time off including vacation, sick leave, short-term disability, and family-care responsibilities.
- Employee Assistance Program access.
- Eligibility for annual performance-based incentive awards and certain tax-advantaged savings plans.
- Inclusive development opportunities, flexible work-life support, paid volunteer days, and employee networks.
About State Street
At State Street, we deliver leading investment platforms, data, expertise, and solutions that accelerate performance and better decision making. With over 200 years of global financial leadership, we equip institutional investors through a comprehensive suite of capabilities: Investment Services: Integrated front-to-back solutions across custody, accounting, and operations. Investment Management: Index and active strategies from one of the world’s largest asset managers. Markets: Multi-asset trading, FX solutions, and data-driven research to enhance portfolio value. Who We Are • 50,000+ employees worldwide • Active in 100+ markets • #1 in ETF servicing What You’ll Find Here • Executive perspectives and thought leadership • Timely market commentary and macro insights • Our views on investment operations, ETFs, private markets, and digital finance • Stories reflecting our culture, values and commitment to diversity and inclusion