Director, Container App Security & Supply Chain

ADP; Roseland (NJ); Hybrid; USD 120,000 - 130,000; Full time

Job summary

ADP is seeking a Director of Container Application Security to lead offensive security for software supply chain. The hybrid role can sit in Alpharetta, GA or Roseland, NJ, reporting to the Global Security Organization.

You will drive container security, compliance, and governance, partnering with engineering and product teams to secure ADP’s internally developed products. You will manage end-to-end security of containerized applications, foster best practices, train teams, and deliver

Qualifications

• Ten years or more IT/cybersecurity exp with 3+ years leadership in multi-cloud and containerized environments.
• Experience leading Container Application Security programs.
• Deep knowledge of application security vulnerabilities (OWASP, SANS).
• Strong communication of security concepts to diverse stakeholders.
• Familiarity with CI/CD pipelines and secure coding practices.

Responsibilities

• Drive container application security across ADP’s business units.
• Institutionalize container security scanning aligned with shift-left DevSecOps.
• Manage supply chain, container security vulnerability remediation workflows.
• Develop and maintain the roadmap for container security and supply chain risk.
• Create and maintain SOPs and governance with key tech and product stakeholders.

Skills

Container security

Security scanning

Cloud security

Leadership

CI/CD pipelines

Education

Bachelor's degree in CS/IS

Tools

Snyk

Chainguard

Grype

Twistlock/Prisma

Docker

Kubernetes

Job description

ADP is seeking a Director of Container Application Security to lead offensive security for software supply chain. The hybrid role can sit in Alpharetta, GA or Roseland, NJ, reporting to the Global Security Organization.

You will drive container security, compliance, and governance, partnering with engineering and product teams to secure ADP’s internally developed products. You will manage end-to-end security of containerized applications, foster best practices, train teams, and deliver