DevSecOps Engineer: Software Supply Chain Security

State Street; Quincy (MA); On-site; USD 90,000 - 157,500; Full time

Benefits offered by this job

401K with company match

Comprehensive medical, dental, vision

Paid time off

Employee Assistance Program

Performance-based incentives

Tax-advantaged savings plans

Job summary

State Street’s Cyber Security Architecture & Engineering team seeks an experienced security professional to lead AppSec and software supply chain security within enterprise CI/CD pipelines.

You will drive SSDLC, automate security tasks, configure artifact caches, and collaborate with engineering to embed secure-by-default practices across Java, .NET, Python, and Node.js ecosystems. This role emphasizes collaboration, automation, and strong security leadership.

Qualifications

• 6+ years of combined experience across development, CI/CD, software supply chain security and application security.
• Experience with application security tooling and modern CI/CD, DevSecOps best practices.
• Experience partnering with Dev communities to influence adoption of app security practices and tooling.
• Security+ or other cybersecurity certification.

Responsibilities

• Help execute our software supply chain security strategy to expand secure-by-default open source artifacts across the enterprise.
• Partner with Engineering team leads to create, implement, and apply DevSecOps and AppSec principles and processes.
• Assist application teams with onboarding to the adopted security tools/technologies; work with vendors to troubleshoot platform integrations.
• Deliver and communicate reporting via dashboard and metrics.
• Develop and maintain supply chain security and DevSecOps documentation.
• Work with teams to continuously improve DevSecOps and Software Supply Chain Security processes and tools.
• Deliver tasks based on project objectives; technically support projects through to completion.

Skills

Java

.NET

Python

Node.js

Azure

AWS

CISSP

Ansible

Terraform

Kubernetes

IaC

Agile DevOps

Education

6+ years combined experience

Security+ or cybersecurity certification

Tools

JFrog Artifactory

Job description

State Street’s Cyber Security Architecture & Engineering team seeks an experienced security professional to lead AppSec and software supply chain security within enterprise CI/CD pipelines.

You will drive SSDLC, automate security tasks, configure artifact caches, and collaborate with engineering to embed secure-by-default practices across Java, .NET, Python, and Node.js ecosystems. This role emphasizes collaboration, automation, and strong security leadership.