Senior DevSecOps Engineer – Software Supply Chain

State Street; Austin (TX); On-site; USD 90,000 - 157,500; Full time

Benefits offered by this job

401K with company match

Medical, dental, vision coverage

Paid time off

Job summary

State Street’s Cyber Security Architecture & Engineering team seeks an experienced security professional to lead AppSec and software supply chain security initiatives. You will bring hands-on security in SDLC, build/release management, and automate security within CI/CD pipelines.

You will configure artifact caches like JFrog Artifactory at scale, work with engineering teams to apply DevSecOps, and ensure secure-by-default open source practices across the enterprise.

Qualifications

• 6+ years of combined experience across development, CI/CD, software supply chain security and application security.
• Experience with application security tooling and modern CI/CD, and DevSecOps best practices.
• Experience partnering with Dev community to influence without authority to adopt application security practices and tooling.
• Security+ or other cybersecurity certification.

Responsibilities

• Help execute software supply chain security strategy enterprise-wide.
• Partner with Engineering leads to implement DevSecOps and AppSec principles and processes.
• Assist onboarding to security tools; collaborate with vendors on tool integrations.
• Deliver and communicate reporting via dashboards and metrics.
• Develop and maintain supply chain security and DevSecOps documentation.
• Continuously improve DevSecOps and Software Supply Chain Security processes and tools.
• Deliver tasks per project objectives and support projects to completion.

Skills

Java

C#/.NET

Python

Node.js

Azure

AWS

CI/CD

DevSecOps

Ansible

Terraform

Kubernetes

IaC

Communication

Multi-project prioritization

Tools

JFrog Artifactory

Job description

State Street’s Cyber Security Architecture & Engineering team seeks an experienced security professional to lead AppSec and software supply chain security initiatives. You will bring hands-on security in SDLC, build/release management, and automate security within CI/CD pipelines.

You will configure artifact caches like JFrog Artifactory at scale, work with engineering teams to apply DevSecOps, and ensure secure-by-default open source practices across the enterprise.