Secure Software Supply Chain Engineer

STATE STREET CORPORATION; Quincy (MA); On-site; USD 100,000 - 168,000; Full time

Benefits offered by this job

401K with company match

Health insurance

Paid time off

Job summary

STATE STREET CORPORATION is seeking a proven expert in AppSec and software supply chain security to strengthen secure-by-default practices across the enterprise. The role focuses on SSDLC, CI/CD automation, and artifact management at scale using tools like Artifactory, Maven Central, and PyPI.

You will collaborate with Engineering, implement DevSecOps principles, and help onboarding teams to security tooling, while delivering actionable dashboards and documentation to improve security posture.

Qualifications

• Experience securing software supply chains and SSDLC in CI/CD environments.
• Hands-on with artifact caches (Artifactory) and sources of truth at scale.
• Familiarity with Maven Central, PyPI and SLSA principles.

Responsibilities

• Help execute software supply chain security strategy across the enterprise.
• Partner with Engineering leads to implement DevSecOps and AppSec processes.
• Onboard application teams to security tools and troubleshoot integrations.
• Deliver dashboards and metrics on security posture.
• Develop and maintain supply chain security documentation.

Skills

Java

.Net

Python

Node.js

CI/CD

DevSecOps

Application security

Kubernetes

Artifactory

Cloud security

Education

CISSP

Security+

Tools

Ansible

Terraform

Kubernetes

Artifactory

Job description

STATE STREET CORPORATION is seeking a proven expert in AppSec and software supply chain security to strengthen secure-by-default practices across the enterprise. The role focuses on SSDLC, CI/CD automation, and artifact management at scale using tools like Artifactory, Maven Central, and PyPI.

You will collaborate with Engineering, implement DevSecOps principles, and help onboarding teams to security tooling, while delivering actionable dashboards and documentation to improve security posture.