The impact you will create:

• Securing our software supply chain and automating release management. This role involves implementing robust security standards across our pipelines, managing complex dependency ecosystems, and driving operational excellence through automated release processes and observability.
• Software Supply Chain Security (SSCS): Implement full pipeline traceability and transparency, including the generation and enforcement of SBOM and SLSA attestations for all builds.
• Dependency Hardening: Manage global dependency security by enforcing strict pinning and locking, and utilizing internal proxies/mirrors to verify and secure all components.
• Vulnerability Management: Establish automated CVE scanning and reporting within the CI/CD pipelines, and implement runtime security scans on clusters.
• Release Automation: Automate the release rollout process to reduce manual intervention and enhance overall development velocity.
• Visibility & Traceability: Build comprehensive monitoring and logging systems for releases, ensuring auditability, clear documentation, and visibility of deployed artifact versions.

Experience and skills you will need:

• Proven experience in DevSecOps, with a strong focus on software supply chain security.
• In-depth knowledge of CI/CD pipeline security, including SBOM/SLSA standards and artifact signing.
• Experience in dependency management, vulnerability scanning (CVE), and securing containerized environments (e.g., Kubernetes).
• Strong background in automation, infrastructure-as-code, and release management.
• Analytical mindset with a focus on observability, monitoring, and operational transparency.