Remote Senior Engineer, Secure Software Supply Chain

Required Skills & Experience

Required Qualifications

• Bachelor's degree in Computer Science, Engineering, Cybersecurity, or related field (or equivalent experience).
• 7+ years of experience in Software Engineering, Platform Engineering, DevSecOps, Application Security Engineering, or related fields.
• 3+ years building developer-facing security automation, CI/CD integrations, or secure software delivery capabilities.
• Experience with multiple software supply chain security domains, including: o Dependency and package management o Artifact repositories and container registries o CI/CD and build security o Vulnerability and secrets detection o Software provenance and signing o Policy-as-code and automated security controls o Container image security
• Experience implementing security controls without negatively impacting developer productivity.
• Proficiency in at least one modern programming language such as Python, Go, Java, C#, TypeScript, or JavaScript.
• Strong understanding of modern software development practices including code reviews, automated testing, deployment pipelines, monitoring, and operational support.
• Strong communication, collaboration, and problem-solving skills.

Nice to Have Skills & Experience

Preferred Qualifications

• Experience with software supply chain security frameworks and technologies such as SLSA, Sigstore, Cosign, in-toto, or OpenSSF.
• Experience building or extending Backstage or similar developer platforms.
• Experience with GitHub, GitHub Actions, reusable workflows, and self-hosted runners.
• Experience with Artifactory, Cloudsmith, Nexus, or similar artifact management platforms.
• Experience supporting package ecosystems including npm, Maven, NuGet, and PyPI.
• Experience with Kubernetes, OpenShift, container registries, and cloud-native platforms.
• Experience working within AWS, Azure, or hybrid cloud environments.

Job Description

Overview

We are seeking a Senior Engineer, Secure Software Supply Chain to design, build, and support security capabilities that integrate directly into software development and delivery processes. This hands-on role will partner with engineering, platform, and security teams to create secure-by-default tools, workflows, and automation that improve both software supply chain security and developer experience.

Key Responsibilities

• Design, build, test, and support reusable software, services, and integrations that improve software supply chain security.
• Implement automated security controls across source control, CI/CD pipelines, artifact repositories, container platforms, and release workflows.
• Develop secure-by-default delivery patterns for software packages, artifacts, and containers.
• Create self-service tools, APIs, templates, and workflows that reduce developer friction.
• Partner with application, platform, and security teams to integrate security into existing engineering processes.
• Drive adoption through documentation, enablement, and continuous improvement.
• Define and monitor metrics related to adoption, reliability, developer experience, and security outcomes.