DevSecOps & Software Supply Chain Security Engineer

Jobtailor; Massachusetts; On-site; USD 140,000 - 180,000; Full time

Job summary

Jobtailor is seeking a seasoned DevSecOps professional to lead software supply chain security initiatives across our enterprise. The role involves applying AppSec and DevSecOps principles with engineering leaders, enabling secure-by-default practices, and ensuring secure artifact sourcing and automation.

The ideal candidate brings extensive experience in SSDLC, cloud security (Azure/AWS), and building scalable security tooling within CI/CD pipelines, plus strong communication across technical

Qualifications

• Proven AppSec and software supply chain governance experience.
• Hands-on SSDLC and CI/CD security automation.
• Experience configuring artifact caches and enterprise sources of truth.
• Familiarity with Maven Central and PyPI ecosystems.
• Security+ or CISSP certification; strong programming background.

Responsibilities

• Execute the software supply chain security strategy across the enterprise.
• Partner with Engineering team leads to apply DevSecOps and AppSec principles.
• Assist application teams onboarding to security tools.
• Work with vendors to troubleshoot platforms and integration-related issues.
• Deliver dashboards and metrics reporting.
• Develop and maintain supply chain security documentation.
• Continuously improve DevSecOps processes and tooling.
• Deliver tasks supporting project objectives to completion.

Skills

AppSec & SBOM governance

CI/CD security automation

DevSecOps

Cloud security

SSDLC

Communication

Education

CISSP

Security+

Tools

JFrog Artifactory

Ansible

Terraform

Kubernetes

Job description

Jobtailor is seeking a seasoned DevSecOps professional to lead software supply chain security initiatives across our enterprise. The role involves applying AppSec and DevSecOps principles with engineering leaders, enabling secure-by-default practices, and ensuring secure artifact sourcing and automation.

The ideal candidate brings extensive experience in SSDLC, cloud security (Azure/AWS), and building scalable security tooling within CI/CD pipelines, plus strong communication across technical