Senior Software Supply Chain Security Lead

State Street; Quincy (MA); On-site; USD 120,000 - 217,500; Full time

Job summary

State Street is seeking an accomplished professional for Cyber Security Architecture & Engineering with hands-on experience in AppSec, software supply chain security, CI/CD pipelines, and SSDLC. The role involves building governance for SBOMs, artifact integrity, and code provenance, while automating security processes at scale.

You will lead the Software Supply Chain Security team, partner with engineering teams to apply DevSecOps and AppSec, and deliver dashboards and metrics to drive security

Qualifications

• 10+ years of relevant combined experience across development, CI/CD, software supply chain security and application security.
• Experience with application security tooling and its operations with modern CI/CD, and DevSecOps best practices.
• Experience partnering with Dev community to influence without authority to adopt application security best practices, and tooling.
• Security+ or other cybersecurity certification.
• Experience with one or more common programming languages such as Java, .Net, Python, etc.

Responsibilities

• Help build and execute our software supply chain security strategy to expand upon State Street’s ability to deploy secure-by-default open source artifacts across the enterprise.
• Lead and grow the Software Supply Chain Security team within State Street
• Partner with Engineering teams leads to create, implement, and apply DevSecOps, and AppSec principles and processes.
• Establish/uplift governance for software bill of materials (SBOM), artifact integrity, code provenance and policy-as-code guardrails within State Street’s software supply chain ecosystem
• Deliver and communicate reporting via dashboard, and metrics.
• Develop and maintain supply chain security and DevSecOps documentation.
• Work with teams to continuously improve DevSecOps, & Software Supply Chain Security processes and tools.
• Deliver tasks based on project objectives; technically support projects through to completion.

Skills

Java

Python

CISSP

DevSecOps

CI/CD

Kubernetes

Ansible

Terraform

Terraform

SBOM governance

Artifactory

Education

10+ years combined experience across development, CI/CD, software supply chain security and app security

Tools

JFrog Artifactory

GitHub Actions

Kubernetes

Job description

State Street is seeking an accomplished professional for Cyber Security Architecture & Engineering with hands-on experience in AppSec, software supply chain security, CI/CD pipelines, and SSDLC. The role involves building governance for SBOMs, artifact integrity, and code provenance, while automating security processes at scale.

You will lead the Software Supply Chain Security team, partner with engineering teams to apply DevSecOps and AppSec, and deliver dashboards and metrics to drive security