Director of Secure Software Supply Chain Engineering

Archer; New York (NY); On-site; USD 215,000 - 275,000; Full time

Job summary

Archer, in collaboration with BlackRock, seeks a Director for Cybersecurity Engineering to shape security into software delivery and cloud infrastructure at scale in a regulated environment. You will drive continuous, cryptographic proof of provenance and attestations for releases.

You’ll champion DevSecOps as policy-driven, automated enforcement across CI/CD and deployment, expanding guardrails to AI-assisted development and agentic workflows while leading a team of security engineers.

Qualifications

• 10+ years in security engineering, platform engineering, or application security in a large, regulated enterprise.
• Deep hands-on understanding of software supply chain security — provenance, attestation, signing, verification, dependency risk.
• Strong command of DevSecOps with CI/CD security, policy as code, and automated control enforcement.

Responsibilities

• Own the software supply chain security strategy end to end, including source integrity, provenance and attestation across the technology estate.
• Secure the build and release path by hardening systems, repositories, and pipelines, enforcing trust decisions based on attested provenance.
• Define and implement security models for agentic and AI-assisted workflows, with least-privilege identities and bounded model access.
• Embed automated controls across the delivery lifecycle: threat modeling, SCA/DAST, and container/infra-as-code scanning with clear rules.
• Collaborate with information security, risk, and audit to translate regulatory requirements into engineered guardrails and report progress to leadership.
• Build, lead, and mentor a team of security engineers and grow security champions across delivery teams.

Skills

Security engineering

Software supply chain

DevSecOps

Cloud-native security

AI/ML security

Influence engineering

Bachelor’s degree

Education

Bachelor’s degree or equivalent

Job description

Archer, in collaboration with BlackRock, seeks a Director for Cybersecurity Engineering to shape security into software delivery and cloud infrastructure at scale in a regulated environment. You will drive continuous, cryptographic proof of provenance and attestations for releases.

You’ll champion DevSecOps as policy-driven, automated enforcement across CI/CD and deployment, expanding guardrails to AI-assisted development and agentic workflows while leading a team of security engineers.