Senior Software Supply Chain Security Lead

STATE STREET CORPORATION; Quincy (MA); On-site; USD 120,000 - 217,500; Full time

Benefits offered by this job

401(k) with company match

Comprehensive benefits

Job summary

State Street is seeking a cybersecurity leader to advance software supply chain security and DevSecOps across the enterprise. You will help build secure-by-default open source artifacts, govern SBOM and artifact provenance, and drive governance and tooling in collaboration with Engineering teams.

You will lead a team, partner with developers, and deliver dashboards and documentation to measure progress and compliance. Strong experience in Java, .NET, Python, and CI/CD is required.

Qualifications

• 10+ years of combined experience across development, CI/CD, software supply chain security and application security.

Responsibilities

• Help build and execute our software supply chain security strategy across the enterprise.
• Lead and grow the Software Supply Chain Security team within State Street.
• Partner with Engineering team leads to implement DevSecOps and AppSec processes.
• Establish governance for SBOM, artifact integrity, code provenance and policy-as-code guardrails.
• Deliver reporting via dashboards and metrics; maintain documentation.
• Work with teams to improve DevSecOps and software supply chain security tools and processes.

Skills

Java

.NET

Python

Node.js

CI/CD

DevSecOps

Ansible

Terraform

Kubernetes

JFrog Artifactory

Tools

JFrog Artifactory

Job description

State Street is seeking a cybersecurity leader to advance software supply chain security and DevSecOps across the enterprise. You will help build secure-by-default open source artifacts, govern SBOM and artifact provenance, and drive governance and tooling in collaboration with Engineering teams.

You will lead a team, partner with developers, and deliver dashboards and documentation to measure progress and compliance. Strong experience in Java, .NET, Python, and CI/CD is required.