Software Supply Chain Security (Socket.dev & Chainguard)

MatchPoint Solutions is a fast-growing global IT and Engineering services firm delivering innovative technology solutions to leading enterprises including Uber, Robinhood, Netflix, Airbnb, Google, and more. With a growing international presence across North America, Europe, Asia, and South America, we help organizations turn ideas into outcomes through cutting-edge technology, industry best practices, and deep technical expertise. We’re expanding our team and looking for driven professionals who want to build impactful solutions in a collaborative, high-growth environment. Senior DevSecOps Engineer Software Supply Chain Security (Socket.dev & Chainguard) Remote 6 months Pay $80 to 90/hr Position Overview Client is seeking a Senior DevSecOps Engineer to lead the implementation and adoption of software supply chain security solutions, including Socket.dev and Chainguard. This individual will work closely with application development, platform engineering, cloud operations, and security teams to improve the security posture of the software development lifecycle and container ecosystem. The ideal candidate will have experience implementing software composition analysis (SCA), dependency security tools, container security platforms, and DevSecOps best practices within enterprise environments. The role will focus on integrating security controls into CI/CD pipelines, securing open-source dependencies, reducing container vulnerabilities, and establishing software supply chain governance.

Key Responsibilities

Software Supply Chain Security Lead deployment and operationalization of Socket.dev across enterprise development environments. Implement software dependency security controls and risk management processes. Establish governance for open-source software consumption and dependency management. Partner with development teams to identify and remediate supply chain risks. Support implementation of Software Bill of Materials (SBOM) strategies. Chainguard Implementation Deploy and integrate Chainguard images and related security capabilities into containerized environments. Assist with enterprise adoption of secure-by-default container images. Support migration from legacy container images to hardened Chainguard images. Develop standards and best practices for container image security. Establish image governance, lifecycle management, and vulnerability remediation processes. DevSecOps & CI/CD Integration Integrate Socket.dev and Chainguard into CI/CD pipelines and developer workflows. Implement automated security checks throughout the software development lifecycle. Collaborate with platform engineering teams to improve security automation. Enhance release pipelines through automated policy enforcement and compliance controls. Support secure software delivery initiatives. Cloud & Container Security Secure Kubernetes and container-based environments. Assist with container security architecture and operational best practices. Implement image scanning, signing, and provenance validation processes. Work with engineering teams to improve cloud-native security controls. Collaboration & Enablement Work closely with application development teams to drive tool adoption. Provide technical guidance and knowledge transfer to developers and platform teams. Develop documentation, implementation standards, and operational runbooks. Support security assessments and compliance initiatives related to software supply chain security. Required Qualifications 5+ years of experience in DevOps, DevSecOps, Application Security, or Cloud Security. Experience implementing software supply chain security controls. Strong understanding of CI/CD pipelines and secure development practices. Experience with GitHub, GitLab, Azure DevOps, or similar platforms. Experience working with containerized environments. Knowledge of open-source dependency management and vulnerability remediation. Strong troubleshooting and communication skills.

Qualifications

Experience deploying or supporting Socket.dev. Experience deploying or supporting Chainguard. Kubernetes and container platform experience. Experience with: GitHub Advanced Security Sonatype JFrog Aqua Security Prisma Cloud Snyk Azure DevOps GitLab CI/CD GitHub Actions OpenShift Kubernetes Docker Experience with: Secure SDLC practices Software Composition Analysis (SCA) Sigstore/Cosign Container image signing SBOMs MatchPoint Solutions is an equal opportunity employer. We are committed to providing equal employment opportunities to all employees and applicants and do not tolerate discrimination or harassment of any kind. Employment decisions are made without regard to race, color, religion, age, sex, national origin, disability, genetic information, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by applicable federal, state, or local laws. This policy applies to all aspects of employment, including recruitment, hiring, placement, promotion, termination, layoffs, recall, transfers, leaves of absence, compensation, and training.