Senior Engineer, Secure Software Supply Chain - 100% Remote

The employer is a financial services organization seeking a Senior Engineer, Secure Software Supply Chain. The role focuses on building and integrating secure software supply chain tools, workflows, and automation while embedding security controls into development and delivery processes. The engineer will partner with application, security, platform, and productivity teams to improve developer experience, adoption, reliability, and security outcomes.

Responsibilities:

• Evaluate, design, build, test, integrate, and support reusable software, services, workflows, and integrations that improve software supply chain security
• Implement secure-by-default patterns for consuming, producing, storing, and distributing software packages and artifacts
• Integrate automated security controls into source control, CI/CD, artifact, container, and release workflows
• Build solutions that are scalable, reliable, maintainable, observable, and broadly reusable across engineering teams
• Design secure software delivery capabilities that are intuitive, self-service, and easy for development teams to adopt
• Reduce developer friction through reusable templates, workflows, APIs, documentation, and automation
• Embed security guardrails directly into development workflows while preserving engineering autonomy and delivery speed
• Partner with application teams to understand existing build, package, artifact, container, and release workflows and identify friction and opportunities
• Define and use metrics to evaluate adoption, developer experience, reliability, and security outcomes

Requirements:

• Bachelor's degree in Computer Science, Engineering, Cybersecurity, or a related field, or equivalent practical experience
• 7+ years of professional software engineering, platform engineering, DevSecOps, application security engineering, or related experience
• 3+ years of experience building developer-facing security automation, CI/CD integrations, secure delivery workflows, or other capabilities that embed security directly into the software development lifecycle
• Experience with several software supply chain domains, such as: Dependency and package management, Artifact repositories and container registries, CI/CD and build security, Vulnerability and secrets detection, Software provenance and signing, Policy-as-code or automated security controls, Container image security
• Experience introducing security controls in a way that improves rather than disrupts developer workflows
• Proficiency in at least one modern programming language, such as Java, Python, Go, C#, TypeScript, or JavaScript
• Experience with modern software engineering practices, including automated testing, code review, source control, build processes, deployment, monitoring, and operational support
• Strong communication, collaboration, and problem-solving skills
• Only candidates available and ready to work directly as Genesis10 employees will be considered for this position
• Experience implementing software supply chain security frameworks and technologies such as SLSA, Sigstore, Cosign, in-toto, OpenSSF guidance, or related solutions
• Experience building or extending Backstage or similar developer platform capabilities to deliver self-service workflows, reusable engineering patterns, and secure-by-default development experiences
• Experience with GitHub, GitHub Actions, reusable workflows, and self-hosted or shared runners
• Experience with artifact and package platforms such as Artifactory, Cloudsmith, Nexus, or equivalent technologies
• Experience with package ecosystems such as npm, NuGet, Maven, and PyPI
• Experience with container registries, Kubernetes, OpenShift, or cloud-native delivery platforms
• Experience supporting capabilities in AWS, Azure, or hybrid cloud environments