DevSecOps & Software Supply Chain Engineer

State Street; Atlanta (GA); On-site; USD 90,000 - 157,500; Full time

Benefits offered by this job

401K with company match

Health, dental, vision insurance

Paid time off and family leave

Employee Assistance Program

Bonuses and merit awards

Tax-advantaged savings plans

Job summary

State Street’s Cyber Security Architecture & Engineering team seeks an accomplished security professional with hands-on AppSec, SSDLC, and software supply chain security experience. The role emphasizes CI/CD automation, artifact management, and enterprise-scale governance.

You will partner with Engineering teams to apply DevSecOps and AppSec practices, onboard apps to security tooling, troubleshoot integrations, and deliver dashboards and documentation to continuously improve security programs.

Qualifications

• 6+ years of relevant combined experience across development, CI/CD, software supply chain security and application security.
• Experience with application security tooling and its operations with modern CI/CD, and DevSecOps best practices.
• Experience partnering with Dev community to influence without authority to adopt application security best practices, and tooling.
• Security certification (e.g., CISSP) preferred.

Responsibilities

• Help execute our software supply chain security strategy to expand secure-by-default open source artifacts across the enterprise.
• Partner with Engineering teams leads to create, implement, and apply DevSecOps and AppSec principles and processes.
• Assist application teams with onboarding to the adopted security tools/technologies and coordinate vendor integrations.
• Deliver and communicate reporting via dashboard and metrics.
• Develop and maintain supply chain security and DevSecOps documentation.
• Work with teams to continuously improve DevSecOps and Software Supply Chain Security processes and tools.
• Deliver tasks based on project objectives; technically support projects through to completion.

Skills

Java

.Net

Python

Node.js

Azure

AWS

CI/CD

DevSecOps

AppSec

Education

Security+ or other cybersecurity certification

Tools

Ansible

Terraform

Kubernetes

JFrog Artifactory

Job description

State Street’s Cyber Security Architecture & Engineering team seeks an accomplished security professional with hands-on AppSec, SSDLC, and software supply chain security experience. The role emphasizes CI/CD automation, artifact management, and enterprise-scale governance.

You will partner with Engineering teams to apply DevSecOps and AppSec practices, onboard apps to security tooling, troubleshoot integrations, and deliver dashboards and documentation to continuously improve security programs.