Open Source Software Senior Security Engineer - Software Supply Chain

This role is for a Senior Security Engineer focused on open source software (OSS) security and software supply chain risk. You will be responsible for establishing and executing OSS security governance, engineering workflows, tooling, and automation to reduce software supply chain exposure. The position involves hands-on technical delivery and collaboration with various engineering and security teams.

• Owns open source software security across governance, engineering, tooling, and automation
• Reduces software supply chain exposure through practical execution
• Defines and operates enterprise governance, standards, and processes for secure OSS usage
• Partners with CI/CD, DevSecOps, and engineering teams for automated security gates
• Identifies and reduces risks related to vulnerable dependencies and malicious packages
• Establishes controls for trusted package sources, build integrity, and secure release practices